Access Control Flaw in Request a Quote Plugin by emarket-design
CVE-2025-64248

Currently unrated

Key Information:

Vendor

WordPress

Vendor
CVE Published:
16 December 2025

What is CVE-2025-64248?

A missing authorization vulnerability has been identified in the Request a Quote plugin by emarket-design. This flaw allows for the exploitation of misconfigured access control security levels, leading to potential unauthorized access to sensitive functionalities. The issue affects all versions from n/a through 2.5.3, presenting a risk to users if not addressed. It is crucial for administrators using this plugin to implement necessary security measures and consider updating to versions that remediate this vulnerability.

Affected Version(s)

Request a Quote <= n/a

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Legion Hunter | Patchstack Bug Bounty Program
.