Advisories · Technology
wpclever WPC Smart Quick View for WooCommerce.
Every CVE that names wpclever WPC Smart Quick View for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
WPC Smart Quick View for WooCommerce <= 4.4.0 - Reflected Cross-Site Scripting via 'woosq-redirect' Parameter
- wpclever WPC Smart Quick View for WooCommerce
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WPC Smart Quick View for WooCommerce <= 4.2.5 - Insecure Direct Object Reference to Unauthenticated Private Product Exposure
- wpclever WPC Smart Quick View for WooCommerce
- Broken access control
- CVSS 6.4 Medium
WPC Smart Quick View for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via woosq_btn Shortcode
- wpclever WPC Smart Quick View for WooCommerce
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
- extendthemes Colibri Page Builder
- smub Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
WPC Smart Quick View for WooCommerce <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
- wpclever WPC Smart Quick View for WooCommerce
- Cross-site scripting (XSS)
- Code injection