MEDIUM 5.3 NVD

CVE-2026-90988

The Request a Quote WordPress plugin through 2.5.6 does not perform an authorization check on one of its unauthenticated AJAX handlers, allowing unauthenticate

The Request a Quote WordPress plugin through 2.5.6 does not perform an authorization check on one of its unauthenticated AJAX handlers, allowing unauthenticated users to read the contact records of quote-request submissions, including records the site has not published.

References

https://wpscan.com/vulnerability/6c02759e-b37e-43ce-a4f4-467e8af63a17/

Published: 2026-10-02 · Source: NVD · Feed updated: 2026-10-02

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-10-02 via NVD.

vulnfeed aggregates 10476 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.