Request a Quote for WooCommerce v2.9.4

Request a Quote for WooCommerce v2.9.4
* Fix - Replaced public quote PDFs with private temporary attachments and removed legacy Quotes.pdf files.
* Fix - Disabled remote resources, PHP execution, and JavaScript in PDF rendering; external/CDN images are omitted.
* Fix - Added permission checks to administrative AJAX actions and single/bulk PDF downloads; bulk downloads also require nonce validation.
* Fix - Enforced quote ownership, approved status, and enabled settings for customer conversions.
* Fix - Enforced ownership for current and legacy My Account quote details.
* Fix - Restricted quote, rule, and field administration to WooCommerce managers.
* Fix - Protected quote uploads with authorized downloads, signed guest links, and Apache/IIS access rules. Nginx requires equivalent rules.
* Fix - Validated cart conversion quote status and tokens, and corrected guest customer handling.

Request a Quote for WooCommerce v2.9.3
* Fix - Fixed CVE-2026-18143: unauthenticated arbitrary file upload via the popup quote AJAX handler (afrfq_submit_quote_via_popup). Only files for enabled "file" quote fields are accepted.
* Fix - All quote file uploads now go through one validator: field allow-list limited to WordPress-allowed MIME types, executable extensions always blocked (including double extensions such as file.php.jpg), real file content checked against the extension, size limits enforced.
* Fix - Uploaded files are stored under random names; the client-supplied file name is never used on disk.
* Fix - Upload folders are protected with .htaccess / web.config / index.php guards against script execution and directory listing.
* Fix - One-time scan moves any executable files already present in the quote upload folders to a locked quarantine folder and shows an admin warning.
* Fix - Stored file names are sanitized before being used in paths and links (admin, My Account, emails, popup review page).

Request a Quote for WooCommerce v2.9.1
*** WooCommerce Request a Quote Plugin Change log ***

2026-06-02 - version 2.9.1
* Update - Updated compatibility for latest WordPress and WooCommerce versions.

Request a Quote for WooCommerce v2.9.0
Version 2.9.0Released on 2025-11-04

• – Added a button color option for quote emails.
• – Implemented automatic redirection to the payment page after converting a quote to an order.
• – Resolved an issue where the admin bar was not displaying.
• – Corrected a design issue in the popup.
• – Made minor design enhancements.

Request a Quote for WooCommerce v2.8.0
Version 2.8.0 Released on 2025-10-16

• Added brand-specific restrictions to quote rules.
• Added an option to include notes in quotes.
• Added a feature to convert quotes directly to the cart.
• Added the ability to submit quotes via a popup.
• Added display of the quote ID in converted orders for easier reference.
• Added inclusion of shipping costs as "Shipping Fee" when converting a quote to an order.
• Added an option to hide specific payment methods when converting a quote to the cart.
• – Compatibility with Price Calculator for WooCommerce by Addify (v1.2.0 and above).
• – Compatibility with Configurable Products Builder by Addify (v1.3.0 and above).
• – Display of offered price, VAT, and total on the quote details page.
• Fixed issue with wholesale tier pricing for the "everyone" user role in quotes.
• Fixed design compatibility issues across multiple themes.
• Improved PDF layout and styling.

Request a Quote for WooCommerce v2.7.3
2025-08-22 - version 2.7.3
* Fix - Added security measures to prevent unauthorized access to PDF.

Request a Quote for WooCommerce v2.7.2
* Fix - Fixed double header and footer bug in emails.
* Fix - Fixed bug with quote success message.
* Fix - Fixed undefined operand error.
* Fix - Fixed typos.

Request a Quote for WooCommerce v2.7.1
* Fix - Disabled automatic quote email on PDF download.