PT-2025-42702 · WordPress · Wpc Smart Quick View For Woocommerce

Lucas Montes · Publicado 2025-10-18 · Atualizado 2025-10-22 · CVE-2025-11741

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WPC Smart Quick View for WooCommerce plugin versions through 4.2.5

Description The WPC Smart Quick View for WooCommerce plugin for WordPress has an information exposure issue. Insufficient restrictions on posts included via the woosq quickview API endpoint allows unauthenticated attackers to extract data from password-protected, private, or draft products that they should not have access to.

Recommendations Update the WPC Smart Quick View for WooCommerce plugin to a version later than 4.2.5.

Correção

IDOR

Enumeração de Fraquezas

CWE-639

Identificadores relacionados

CVE-2025-11741

Produtos afetados

Wpc Smart Quick View For Woocommerce

Referências · 6

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3379189%40woo-smart-quick-view&new=3379189%40woo-smart-quick-view&sfp_email=&sfph_mail= · Nota
• https://twitter.com/VulmonFeeds/status/1979453402493911124 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-11741 · Nota de Segurança
• https://twitter.com/transilienceai/status/1980876838210793972 · Publicação no Twitter
• https://wordfence.com/threat-intel/vulnerabilities/id/220487de-2a1c-47ec-ac65-db1af44aed3d?source=cve · Nota
• https://t.me/CVEtracker/35271 · Publicação no Telegram