PT-2025-38817 · WordPress · Wpb Quick View For Woocommerce

Prissy · Publicado 2025-09-22 · Atualizado 2025-09-22 · CVE-2025-57967

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions WPBean WPB Quick View for WooCommerce versions through 2.1.8

Description The software contains a flaw related to improper input handling during web page generation, specifically a Cross-site Scripting issue. This allows for Stored XSS attacks. The issue impacts the way data is processed, potentially allowing malicious code injection.

Recommendations Update WPBean WPB Quick View for WooCommerce to a version later than 2.1.8.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-57967

Produtos afetados

Wpb Quick View For Woocommerce

Referências · 4

• https://twitter.com/CVEnew/status/1970208064516268443 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-57967 · Nota de Segurança
• https://patchstack.com/database/wordpress/plugin/woocommerce-lightbox/vulnerability/wordpress-wpb-quick-view-for-woocommerce-plugin-2-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://patchstack.com/database/Wordpress/Plugin/woocommerce-lightbox/vulnerability/wordpress-wpb-quick-view-for-woocommerce-plugin-2-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota