Instantio < 1.2.6 - CSRF Bypass

Description

The plugin did not properly check for CSRF in its wi_variable_product_quick_view AJAX action, allowing attacker to make user call it via a CSRF attack.