WordPress plugin WPC Smart Quick View for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-33904 · Unknown +1 · Woocommerce +1

Name of the Vulnerable Software and Affected Versions: WPC Smart Quick View for WooCommerce plugin versions up to and including 4.2.1 Description: The WPC Smart Quick View for WooCommerce plugin for WordPress is susceptible to Stored Cross-Site Scripting through the woosq btn shortcode...

PT-2025-34052

Name of the Vulnerable Software and Affected Versions: QuickCMS.EXT version 6.8 QuickCMS.EXT affected versions not specified Description: QuickCMS.EXT is susceptible to a Reflected Cross-Site Scripting XSS issue within the thumbnail viewer functionality. An attacker can create a malicious URL tha...

WordPress WPC Smart Quick View for WooCommerce plugin <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via woosq_btn Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via woosqbtn Shortcode vulnerability discovered by zaim in WordPress Plugin WPC Smart Quick View for WooCommerce versions = 4.2.1...

CVE-2025-54145 Scanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websites

The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme. This vulnerability was fixed in Firefox for iOS 141...

CVE-2025-54145 Scanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner could load arbitrary websites

The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme. This vulnerability was fixed in Firefox for iOS 141...

Malicious code in authorize-theta-xi-quick-user (npm)

The package authorize-theta-xi-quick-user was found to contain malicious code...

Malicious code in thread-reject-runtime-quick-rain (npm)

The package thread-reject-runtime-quick-rain was found to contain malicious code...

MAL-2025-40204 Malicious code in yaml-psi-tau-void-quick (npm)

The package yaml-psi-tau-void-quick was found to contain malicious code...

MAL-2025-31294 Malicious code in quick-code-balance-spy-java (npm)

The package quick-code-balance-spy-java was found to contain malicious code...

Malicious code in reject-uglify-phi-xml-quick (npm)

The package reject-uglify-phi-xml-quick was found to contain malicious code...

Malicious code in xi-web-data-water-quick (npm)

The package xi-web-data-water-quick was found to contain malicious code...

Malicious code in lambda-fast-yaml-quick-virtualize (npm)

The package lambda-fast-yaml-quick-virtualize was found to contain malicious code...

Malicious code in meta-compile-shell-quick-resolve (npm)

The package meta-compile-shell-quick-resolve was found to contain malicious code...

MAL-2025-19795 Malicious code in error-iota-file-quick-shell (npm)

The package error-iota-file-quick-shell was found to contain malicious code...

MAL-2025-39768 Malicious code in xi-web-data-water-quick (npm)

The package xi-web-data-water-quick was found to contain malicious code...

MAL-2025-36837 Malicious code in thread-reject-runtime-quick-rain (npm)

The package thread-reject-runtime-quick-rain was found to contain malicious code...

MAL-2025-31297 Malicious code in quick-start_onnxruntime-node (npm)

The package quick-startonnxruntime-node was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-32043 Malicious code in reject-uglify-phi-xml-quick (npm)

The package reject-uglify-phi-xml-quick was found to contain malicious code...

@mattdesl/quick-stub (>=1.0.0 <=3.0.1), brick (=0.0.0) +15 more potentially affected by unknown CVE via variable-name (>=0.0.1 <=0.0.2)

variable-name NPM version =0.0.1, =1.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =1.0.0, =0.0.0, =1.2.0, =7.0.0, =1.0.0, =0.0.0, =1.1.1, =1.0.0, =1.9.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-38145...