CVE-2024-6457

🗓️ 16 Jul 2024 11:00:58Reported by WordfenceType

The HUSKY – Products Filter Professional for WooCommerce plugin is vulnerable to time-based SQL Injection via the 'woof_author' parameter due to insufficient escaping and lack of query preparation

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the HUSKY plugin – Products Filter Professional for WooCommerce (formerly WOOF) of the WordPress content management system – relates to the failure to protect the SQL query structure. This allows attackers to gain unauthorized access to protected information.	31 Jul 202400:00	–	bdu_fstec
Circl	CVE-2024-6457	16 Jul 202413:45	–	circl
Cvelist	CVE-2024-6457 HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection	16 Jul 202411:00	–	cvelist
EUVD	EUVD-2024-47553	3 Oct 202520:07	–	euvd
NVD	CVE-2024-6457	16 Jul 202411:15	–	nvd
Patchstack	WordPress HUSKY plugin <= 1.3.6 - Unauthenticated Time-Based SQL Injection vulnerability	16 Jul 202402:22	–	patchstack
Patchstack	WordPress HUSKY Plugin <= 1.3.6 is vulnerable to SQL Injection	16 Jul 202400:00	–	patchstack
Positive Technologies	PT-2024-5249	2 Jul 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-6457	5 Feb 202503:00	–	redhatcve
Vulnrichment	CVE-2024-6457 HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection	16 Jul 202411:00	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

pluginus husky_-_products_filter_professional_for_woocommerceRange<1.3.6.1wordpress

[
  {
    "vendor": "realmag777",
    "product": "HUSKY – Products Filter Professional for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.3.6",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/ecfdf7b1-9bb8-4c1d-a00a-ca1e44440cab
plugins	www.plugins.trac.wordpress.org/browser/woocommerce-products-filter/trunk/ext/by_author/index.php
plugins	www.plugins.trac.wordpress.org/changeset/3116888/

08 Apr 2026 19:22Current

9.7High risk

Vulners AI Score9.7

CVSS 3.17.5 - 9.8

EPSS0.08475

SSVC

CWE-89