CVE-2026-84238

Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium < 4.46.0 versions.

  • Published Sep 3, 2026
  • CVSS 9.8 critical
  • 0.5% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-84238 at the National Vulnerability Database