YITH WooCommerce Quick View

YITH WooCommerce Quick View has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 7.1 out of 10. Severity breakdown: 0 critical and 1 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

Every one of the 4 issues recorded for YITH WooCommerce Quick View has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. YITH WooCommerce Quick View is installed on roughly 90,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.5/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all YITH WooCommerce Quick View vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.1

YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization

Read the full analysis

Vulnerability Records

4 records
YITH WooCommerce Quick View banner
Latestv2.18.0

YITH WooCommerce Quick View

YITHEMES

Author

YITHEMES

3.8(27)
76/100
Last Updated
2026-09-03 (10d ago)
Active Installs
90,000+
Downloads
6,446,790
Requires WP
6.9+
Requires PHP
8.0+
Tested up to
WP 7.1
Created
2015-02-17 (12y ago)
Requires Plugins
woocommerce

Show a product preview in a modal window to improve your customers’ shopping experience YITH WooCommerce Quick View is the free solution to simplify the product viewing and buying process for your customers. In fact, the plugin allows you to show a preview of your products in a modal window, directly on the shop page. This way, with just one click, your customers can view available sizes and colors, read product descriptions, and add items to their shopping carts without leaving the catalog. This makes comparing products and purchasing multiple items a quick and easy process. And thanks to the new 100% mobile friendly design, YITH WooCommerce Quick View also improves the shopping experience for customers who purchase using smartphones and tablets. Free version features Use a text button to preview the product and customize the text Display the button on the page, below the “Add to cart” button Enable the Quick View on mobile devices (100% mobile friendly design) Display the product Quick View in a modal window Choose if and what description to show (short or long) Choose the size of the product image Set the background color of the Quick View Set the background overlay color Set the color of the close icon Set the colors of the “Quick View” button Want to see the plugin in action? Take a look at the live demo of the free version >. Need extra features? Upgrade to premium! With the free version of YITH WooCommerce Quick View you have everything you need to show a quick overview of your products and improve the user experience of your shop. But if you’re looking for advanced options and more versatility, we recommend upgrading to the premium version of the plugin. Premium version features: Use a button with an icon Upload a custom icon for the “Quick View” button Display the button when hovering over the product image Use a shortcode or Gutenberg block to allow users to preview a specific product anywhere in your store Show the product Quick View in a cascading section or in a sidebar Select an opening animation Configure modal window height and width Enable product navigation Choose which product information to show or hide (image, name, rating, price, “Add to cart” button, etc.) Choose whether to hide the product image gallery, show it in a classic style, or enable a slider Display a link to redirect the user to the product detail page Choose whether to close the Quick View or redirect the user to the Checkout page after adding the product to the cart Enable social icons to share the product Quick View Customize the “Add to cart” button Check out the live demo of the premium version >

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C