5.3
Moyenne
CVE-2025-11741 The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Information Exposure in all versions up…
Description
The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.2.5 via the 'woosq_quickview' AJAX endpoint due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft products that they should not have access to.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WPC Smart Quick View for WooCommerce 4.2 | premières → 4.2.5 | Pas de correctif indiqué |
Autres CVE de WPC Smart Quick View for WooCommerce
Les 5 CVE de WPC Smart Quick View for WooCommerce →
CVE-2026-103888
The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…
6.1
Moyenne
CVE-2025-8618
The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
6.4
Moyenne
CVE-2024-5020
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox…
6.4
Moyenne
CVE-2023-6494
The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin…
4.4
Moyenne