Skip to content
OpenAdvisories

Product · ShapedPlugin

Quick View for WooCommerce

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-12584

    Quick View for WooCommerce <= 2.2.17 - Unauthenticated Private Product Disclosure

    The Quick View for WooCommerce plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.17 via the 'wqv_popup_content' AJAX endpoint due to insufficient restrictions on which products can be included. This makes it …

    ShapedPlugin Quick View for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2025-58228

    WordPress Quick View for WooCommerce Plugin <= 2.2.16 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShapedPlugin LLC Quick View for WooCommerce woo-quickview allows Stored XSS.This issue affects Quick View for WooCommerce: from n/a through <= 2.2.16.

    ShapedPlugin Quick View for WooCommerce Web / CMS