Information Exposure in WPC Smart Quick View for WooCommerce Plugin by WordPress

CVE-2025-11741

What is CVE-2025-11741?

The WPC Smart Quick View for WooCommerce plugin has a vulnerability that leads to information exposure through the 'woosq_quickview' AJAX endpoint. This issue arises due to inadequate restrictions on which posts can be accessed, permitting unauthorized users to retrieve sensitive data from password-protected, private, or draft products. As a result, potential attackers can exploit this flaw to gain access to information that should remain secured.

References