PT-2025-38817 · WordPress · Wpb Quick View For Woocommerce

Prissy · Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-57967

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions WPBean WPB Quick View for WooCommerce versions through 2.1.8

Description The software contains a flaw related to improper input handling during web page generation, specifically a Cross-site Scripting issue. This allows for Stored XSS attacks. The issue impacts the way data is processed, potentially allowing malicious code injection.

Recommendations Update WPBean WPB Quick View for WooCommerce to a version later than 2.1.8.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-57967

Affected Products

Wpb Quick View For Woocommerce

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-57967 · Security Note
• https://twitter.com/CVEnew/status/1970208064516268443 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/woocommerce-lightbox/vulnerability/wordpress-wpb-quick-view-for-woocommerce-plugin-2-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/woocommerce-lightbox/vulnerability/wordpress-wpb-quick-view-for-woocommerce-plugin-2-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve · Note