CVE-2026-105969

UNKNOWN 0.0

CodeAtoz B2B Suite for WooCommerce < 1.6.1 - Unauthenticated Guest Quote Disclosure

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to retrieve another guest's quote, including the buyer's name, email address and requested line items, by supplying an enumerable identifier.

Vendor	unknown
Product	codeatoz b2b suite for woocommerce
Published	Oct 14, 2026

Stay Ahead of the Next One

Get instant alerts for unknown codeatoz b2b suite for woocommerce

Be the first to know when new unknown vulnerabilities affecting unknown codeatoz b2b suite for woocommerce are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / CodeAtoZ B2B Suite for WooCommerce

0 < 1.6.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/bb9fa8cf-413f-45b4-9930-59213104ce28/

Credits

Pedro Pinho WPScan