Request a Quote for WooCommerce v2.9.3 Plugin
WooCommerce Request a Quote is a plugin that allows customers to add products to a quote basket and request price estimations for the products they are interested in. The plugin displays a quote button on selected products and lets customers add products to a quote basket and submit the quotation by filling out a simple form.
The plugin allows merchants to create multiple rules for showing the quote button for selected user roles, hide prices and replace the “add to cart” button with the quote button. This feature is useful for B2B sales where prices depend on factors such as order quantity, product requirements, and delivery date.
WooCommerce Request a Quote provides a complete quotation management system with features such as customizing quote button text, quote form fields, and automatic email notifications for admin and customers. The plugin is also compatible with page builder plugins and has options for redirecting after quote form submission and attaching the quote to multiple menus.
2.9.3Core Features of Request a Quote for WooCommerce Plugin
- Complete quotation management system
- Option to display “Add to Quote” button on selected products
- Option to show quote button for guests and selected user roles
- Option to replace “Add to Cart” with “Quote” or custom button & link
- Option to hide price and replace with custom text
- Ability to add multiple products to quote basket
- Mini quote basket to keep track of selected products
- Customizable quote button text
- Customizable quote form fields (mandatory or optional)
- Automatic email notifications for admin & customers
- Customizable quote submission messages
- Redirection after quote form submission
- Ability to attach quote to multiple menus
- Compatibility with page builder plugins.
What’s New (Changelog) in Request a Quote for WooCommerce v2.9.3
2026-09-26 - version 2.9.3
* Fix - Fixed CVE-2026-18143: unauthenticated arbitrary file upload via the popup quote AJAX handler (afrfq_submit_quote_via_popup). Only files for enabled "file" quote fields are accepted.
* Fix - All quote file uploads now go through one validator: field allow-list limited to WordPress-allowed MIME types, executable extensions always blocked (including double extensions such as file.php.jpg), real file content checked against the extension, size limits enforced.
* Fix - Uploaded files are stored under random names; the client-supplied file name is never used on disk.
* Fix - Upload folders are protected with .htaccess / web.config / index.php guards against script execution and directory listing.
* Fix - One-time scan moves any executable files already present in the quote upload folders to a locked quarantine folder and shows an admin warning.
* Fix - Stored file names are sanitized before being used in paths and links (admin, My Account, emails, popup review page).
Similar Plugins