Products Quick View for WooCommerce, de3e06615019aff108fb9f37a06bdb545ac61b79

CVE, Research URL: de3e06615019aff108fb9f37a06bdb545ac61b79
Home page URL: Security reports for Products Quick View for WooCommerce
Application: Products Quick View for WooCommerce
Published on: Aug 14, 2023
Research Description: Products Quick View for WooCommerce [woocommerce-products-quick-view] < 2.3.0 Products Quick View for WooCommerce <= 2.2.0 - Missing Authorization The Products Quick View for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the quick_view_prettyphoto_custom_template_load() and quick_view_custom_template_load() functions called via AJAX actions in versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to load templates and view products.
Affected versions: max 2.3.0.
Status: vulnerable