SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-84238

CRITICAL · CVSS 9.8 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

The YITH Request a Quote for WooCommerce Premium plugin versions prior to 4.46.0 are vulnerable to unauthenticated broken access control, allowing attackers to gain unauthorized access to sensitive functionalities. This critical vulnerability could lead to unauthorized data exposure or manipulation, posing significant risks to e-commerce operations. Organizations using affected versions of this plugin should prioritize immediate updates to mitigate potential exploitation.

CVE
CVE-2026-84238
Severity
CRITICAL
CVSS
9.8
EPSS
0.27%

Original NVD Description

Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium < 4.46.0 versions.