CVE-2025-24705
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Jan 24, 2025
CWE ID 862
Summary
CVE-2025-24705 is a critical vulnerability affecting the Arshid WooCommerce Quick View plugin. Hackers can exploit this Missing Authorization issue to gain unauthorized access, taking advantage of incorrectly configured access control security levels. This vulnerability poses a risk to all WooCommerce Quick View installations, from the unspecified version n/a through 1.1.1. To mitigate this threat, affected users are advised to update their plugin as soon as a patch is released.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress