Black Friday: 30% OFF on all plans, applied automatically at checkout View plans
1,195 sites with automatic updates See plans
Log in Cart

WooCommerce Request a Quote Changelog

Every recorded version, newest first, with what changed in each one.

Latest 2.9.4 · Oct 7, 202615 versionsSince Jan 2024

2026 · 4 versions

  1. 2.9.4

    Latest
    8 fixes
    Fixed
    • Replaced public quote PDFs with private temporary attachments and removed legacy Quotes.pdf files.
    • Disabled remote resources, PHP execution, and JavaScript in PDF rendering; external/CDN images are omitted.
    • Added permission checks to administrative AJAX actions and single/bulk PDF downloads; bulk downloads also require nonce validation.
    • Enforced quote ownership, approved status, and enabled settings for customer conversions.
    • Enforced ownership for current and legacy My Account quote details.
    • Restricted quote, rule, and field administration to WooCommerce managers.
    • Protected quote uploads with authorized downloads, signed guest links, and Apache/IIS access rules. Nginx requires equivalent rules.
    • Validated cart conversion quote status and tokens, and corrected guest customer handling.

  2. 2.9.3

    6 fixes
    Fixed
    • Fixed CVE-2026-18143: unauthenticated arbitrary file upload via the popup quote AJAX handler (afrfq_submit_quote_via_popup). Only files for enabled "file" quote fields are accepted.
    • All quote file uploads now go through one validator: field allow-list limited to WordPress-allowed MIME types, executable extensions always blocked (including double extensions such as file.php.jpg), real file content checked against the extension, size limits enforced.
    • Uploaded files are stored under random names; the client-supplied file name is never used on disk.
    • Upload folders are protected with .htaccess / web.config / index.php guards against script execution and directory listing.
    • One-time scan moves any executable files already present in the quote upload folders to a locked quarantine folder and shows an admin warning.
    • Stored file names are sanitized before being used in paths and links (admin, My Account, emails, popup review page).

  3. 2.9.2

    1 fix
    Fixed
    • Fixed unauthenticated arbitrary file upload.

  4. 2.9.1

    1 improvement
    Improved
    • Updated compatibility for latest WordPress and WooCommerce versions.

2025 · 2 versions

  1. 2.9.0

    2 new3 fixes
    New
    • Added a button color option for quote emails.
    • Implemented automatic redirection to the payment page after converting a quote to an order.
    Fixed
    • Resolved an issue where the admin bar was not displaying.
    • Corrected a design issue in the popup.
    • Made minor design enhancements.

  2. 2.8.0

    7 new3 improvements3 fixes
    New
    • Added brand-specific restrictions to quote rules.
    • Added an option to include notes in quotes.
    • Added a feature to convert quotes directly to the cart.
    • Added the ability to submit quotes via a popup.
    • Added display of the quote ID in converted orders for easier reference.
    • Added inclusion of shipping costs as "Shipping Fee" when converting a quote to an order.
    • Added an option to hide specific payment methods when converting a quote to the cart.
    Improved
    • Compatibility with Price Calculator for WooCommerce by Addify (v1.2.0 and above).
    • Compatibility with Configurable Products Builder by Addify (v1.3.0 and above).
    • Display of offered price, VAT, and total on the quote details page.
    Fixed
    • Fixed issue with wholesale tier pricing for the "everyone" user role in quotes.
    • Fixed design compatibility issues across multiple themes.
    • Improved PDF layout and styling.

2024 · 9 versions

  1. 2.7.3

    1 fix
    Fixed
    • Added security measures to prevent unauthorized access to PDF.

  2. 2.7.2

    4 fixes
    Fixed
    • Fixed double header and footer bug in emails.
    • Fixed bug with quote success message.
    • Fixed undefined operand error.
    • Fixed typos.

  3. 2.7.1

    1 fix
    Fixed
    • Disabled automatic quote email on PDF download.

  4. 2.7.0

    2 new5 improvements2 fixes
    New
    • Added pagination in my account quote listing table.
    • Included a checkbox to apply rules to all user roles.
    Improved
    • Updated email template design
    • improved quote page and added a new 2-column layout.
    • Implemented Ajax-based update for product quantity and offer price on quote detail page
    • Ensured compatibility with Astra, Avada, Divi, and Woodmart themes.
    • Set 3 default quote fields if no fields are present.
    Fixed
    • Resolved convert to order issues.
    • Improved PDF design.

  5. 2.6.4

    1 fix
    Fixed
    • Fixed warnings and errors.

  6. 2.6.3

    1 new2 fixes
    New
    • Add enable or disable PDF download for customers.
    Fixed
    • Fixed quote page creation issue.
    • Typo fixed in PDF file.

  7. 2.6.2

    1 fix
    Fixed
    • Multiple Qoute Page Creation Issue.

  8. 2.6.1

    1 fix
    Fixed
    • Qoute Page Creation Issue.

  9. 2.6.0

    1 new
    New
    • Qoute PDF.

Changelog published by the developer, in their original language.