High severity7.5NVD Advisory· Published Mar 20, 2025· Updated Jun 17, 2026

CVE-2024-13558

Description

The NP Quote Request for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.179 due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to read the content of quote requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/NP Quote Request for WooCommercellm-create
Range: <=1.9.179
gplsaver/NP Quote Request for WooCommercev5
Range: 0

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/3256816/nvdPatch
www.wordfence.com/threat-intel/vulnerabilities/id/5991c86b-6785-41a6-a5df-c65e8a28201cnvdThird Party Advisory
wordpress.org/plugins/woo-rfq-for-woocommerce/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000