CVE-2025-1661

🗓️ 11 Mar 2025 03:22:19Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 148 Views🌐 WEB

Vulnerability in HUSKY Products Filter for WooCommerce allows file inclusion and code execution.

Reporter	Title	Published	Views	Family All 13
GithubExploit	Exploit for Path Traversal in Pluginus Husky_-_Products_Filter_Professional_For_Woocommerce	13 Mar 202513:45	–	githubexploit
GithubExploit	Exploit for Path Traversal in Pluginus Husky_-_Products_Filter_Professional_For_Woocommerce	18 Mar 202519:06	–	githubexploit
Circl	CVE-2025-1661	11 Mar 202504:40	–	circl
CNNVD	WordPress plugin HUSKY Products Filter Professional for WooCommerce 路径遍历漏洞	11 Mar 202500:00	–	cnnvd
Cvelist	CVE-2025-1661 HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion	11 Mar 202503:22	–	cvelist
Nuclei	HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion	7 Jun 202603:02	–	nuclei
NVD	CVE-2025-1661	11 Mar 202504:15	–	nvd
Patchstack	WordPress HUSKY plugin <= 1.3.6.5 - Unauthenticated Local File Inclusion vulnerability	10 Mar 202517:55	–	patchstack
RedhatCVE	CVE-2025-1661	13 Mar 202503:50	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2025-1661	10 Mar 202500:00	–	vulncheck_kev

NVD

Vulners

Node

pluginus husky_-_products_filter_professional_for_woocommerceRange<1.3.6.6wordpress

[
  {
    "vendor": "realmag777",
    "product": "HUSKY – Products Filter Professional for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.3.6.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/woocommerce-products-filter/trunk/ext/by_text/index.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/9ae7b6fc-2120-4573-8b1b-d5422d435fa5

Parameter	Position	Path	Description	CWE
template	query param	wp-admin/admin-ajax.php	Unauthenticated Local File Inclusion via template parameter in woof_text_search AJAX action	CWE-22

08 Apr 2026 17:11Current

8.2High risk

Vulners AI Score8.2

CVSS 3.19.8

EPSS0.93155

SSVC

CWE-22