PT-2025-42702
CVE-2025-11741
·
Publicado
2025-10-17
·
Atualizado
2025-10-22
Descrição por
CVSS 3.1
5.3
MédiaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
WPC Smart Quick View for WooCommerce plugin versions through 4.2.5
Description
The WPC Smart Quick View for WooCommerce plugin for WordPress has an information exposure issue. Insufficient restrictions on posts included via the
woosq quickview API endpoint allows unauthenticated attackers to extract data from password-protected, private, or draft products that they should not have access to.Recommendations
Update the WPC Smart Quick View for WooCommerce plugin to a version later than 4.2.5.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾