What’s Vulnerable › Products

Request a Quote vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Request a Quote version is affected

Latest Request a Quote vulnerabilities

• CVE-2026-90988 — Request a Quote <= 2.5.6 - Unauthenticated Quote Request Contact Record Disclosure via emd_get_std_pagenum (CVSS 5.3)
• CVE-2025-64248 — WordPress Request a Quote plugin <= 2.5.3 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2025-58915 — WordPress Request a Quote plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-6231 — Request a Quote < 2.4.1 - Admin+ Stored XSS (CVSS 5.9)
• CVE-2022-2240 — Request a Quote <= 2.3.7 - CSV Injection (CVSS 8.8)
• CVE-2022-2239 — Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)
• CVE-2021-24489 — Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)
• CVE-2021-24420 — Request a Quote < 2.3.4 - Authenticated Stored XSS (CVSS 5.4)