YITH WooCommerce Quick View vulnerabilities | LiveThreat CVE Feed

Product

YITH WooCommerce Quick View

by yithemes · last CVE Dec 13, 2025

CVEs

On KEV

6.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 2Low 0

Severity

Exploitation

Watch

Add YITH WooCommerce Quick View to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-8617	6.4	0%	Dec 13	YITH WooCommerce Quick View <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yith_quick_view Shortcode Affected: through 2.7.0
CVE-2019-16251	4.3	1%	Oct 31	plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes Affected: through 1.3.13