PT-2025-42702 · WordPress · Wpc Smart Quick View For Woocommerce

Lucas Montes · Published 2025-10-18 · Updated 2025-10-22 · CVE-2025-11741

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WPC Smart Quick View for WooCommerce plugin versions through 4.2.5

Description The WPC Smart Quick View for WooCommerce plugin for WordPress has an information exposure issue. Insufficient restrictions on posts included via the woosq quickview API endpoint allows unauthenticated attackers to extract data from password-protected, private, or draft products that they should not have access to.

Recommendations Update the WPC Smart Quick View for WooCommerce plugin to a version later than 4.2.5.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-11741

Affected Products

Wpc Smart Quick View For Woocommerce

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-11741 · Security Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3379189%40woo-smart-quick-view&new=3379189%40woo-smart-quick-view&sfp_email=&sfph_mail= · Note
• https://twitter.com/VulmonFeeds/status/1979453402493911124 · Twitter Post
• https://twitter.com/transilienceai/status/1980876838210793972 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/220487de-2a1c-47ec-ac65-db1af44aed3d?source=cve · Note
• https://t.me/CVEtracker/35271 · Telegram Post