WPC Smart Quick View for WooCommerce Information Exposure Vulnerability

A vulnerability allowing information exposure has been identified in the WPC Smart Quick View for WooCommerce plugin for WordPress, affecting all versions through 4.2.5. The issue arises from insufficient restrictions on the 'woosq_quickview' AJAX endpoint, allowing unauthenticated attackers to access data from password-protected, private, or draft products that should otherwise be restricted.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive product information, including details from password-protected, private, or draft products.

Remediation

Users are advised to update the WPC Smart Quick View for WooCommerce plugin to version 4.2.6 or a newer patched version.