Request a Quote – Quote Forms for Any WordPress Site

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Request a Quote – Quote Forms for Any WordPress Site

Information

Software Type Plugin
Software Slug request-a-quote (view on wordpress.org)
Software Status Active
Software Author emarket-design
Software Website emdplugins.com
Software Downloads 98,003
Software Active Installs 900
Software Record Last Updated July 13, 2026

10 Vulnerabilities

Submit a Vulnerability
Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter
7.5
CVE-2026-14249
Jul 1, 2026
Researcher: Mitchell
Request a Quote <= 2.5.3 - Missing Authorization
4.3
CVE-2025-64248
Dec 15, 2025
Researcher: Legion Hunter
Multiple Plugins by eMarket Design <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-58915
Sep 23, 2025
Researcher: Muhammad Yudha - DJ
Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
8.1
CVE-2025-8420
Aug 5, 2025
Researchers: mikemyers, theviper17y
Request a Quote <= 2.4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-6231
Jul 2, 2024
Researcher: Bob Matyas
Request a Quote <= 2.3.10 - Cross-Site Request Forgery
4.3
CVE ID Unknown
Jun 30, 2023
Researchers:
Request a Quote <= 2.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE-2022-2239
Jun 28, 2022
Researcher: Benachi
Request a Quote <= 2.3.8 - CSV Injection
8.3
CVE-2022-2240
Jun 28, 2022
Researcher: Benachi
Request a Quote <= 2.3.4 - Stored Cross-Site Scripting
4.8
CVE-2021-24489
Sep 21, 2021
Researcher: YoshiKen
Request a Quote <= 2.3.3 - Authenticated Stored Cross-Site Scripting
5.4
CVE-2021-24420
Jun 16, 2021
Researcher: Ajay Sandipan Thorbole
Title Status CVE ID CVSS Researchers Date
Request a Quote Form Plugin <= 2.5.5 - Unauthenticated Code Injection via 'path' Parameter Patched CVE-2026-14249 7.5 Mitchell July 1, 2026
Request a Quote <= 2.5.3 - Missing Authorization Patched CVE-2025-64248 4.3 Legion Hunter December 15, 2025
Multiple Plugins by eMarket Design <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-58915 6.4 Muhammad Yudha - DJ September 23, 2025
Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution Patched CVE-2025-8420 8.1 mikemyers, theviper17y August 5, 2025
Request a Quote <= 2.4.0 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2024-6231 4.4 Bob Matyas July 2, 2024
Request a Quote <= 2.3.10 - Cross-Site Request Forgery Patched 4.3 June 30, 2023
Request a Quote <= 2.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2022-2239 5.5 Benachi June 28, 2022
Request a Quote <= 2.3.8 - CSV Injection Patched CVE-2022-2240 8.3 Benachi June 28, 2022
Request a Quote <= 2.3.4 - Stored Cross-Site Scripting Patched CVE-2021-24489 4.8 YoshiKen September 21, 2021
Request a Quote <= 2.3.3 - Authenticated Stored Cross-Site Scripting Patched CVE-2021-24420 5.4 Ajay Sandipan Thorbole June 16, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation