Request a Quote vulnerabilities

The Request a Quote WordPress plugin through 2.5.6 does not perform an authorization check on one of its unauthenticated AJAX handlers, allowing unauthenticated users to read the contact records of quote-request submissions, including records the site has not published.

The Request a Quote plugin for WordPress up to version 2.5.5 is vulnerable to Code Injection via the emd_delete_file AJAX action. An unauthenticated attacker can invoke arbitrary zero-argument PHP functions, such as phpinfo(), by manipulating the $_POST['path'] parameter.

The Request a Quote plugin for WordPress (from emarket-design) contains a Stored XSS vulnerability in versions up to and including 2.5.0. Improper neutralization of input during web page generation allows persistent script injection.