{"id":"CVE-2026-105969","revision":"b8438b7bc38d4ee88657d030a616997b","records":[{"revision":"b8438b7bc38d4ee88657d030a616997b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-105969","aliases":[],"title":"CodeAtoz B2B Suite for WooCommerce < 1.6.1 - Unauthenticated Guest Quote Disclosure","description":"The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to retrieve another guest's quote, including the buyer's name, email address and requested line items, by supplying an enumerable identifier.","state":0,"publishedAt":"2026-10-14T06:00:09.529+00:00","modifiedAt":"2026-10-14T13:42:24.258+00:00","affected":[{"ecosystem":"Vendor product","name":"CodeAtoZ B2B Suite for WooCommerce","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Unknown\",\n                    \"product\": \"CodeAtoZ B2B Suite for WooCommerce\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"1.6.1\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://wpscan.com/vulnerability/bb9fa8cf-413f-45b4-9930-59213104ce28/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-105969","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-105969","identifiers":["CVE-2026-105969"]},"retained":false,"historicalAffected":[]}],"coverage":[]}