Lucene search
K

56 matches found

CNVD
CNVD
added 2026/04/14 12:0 a.m.2 views

WordPress Plugin Product Filter for WooCommerce by WBW Has Unspecified Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin Product Filter for WooCommerce by WBW,...

8.6CVSS5.6AI score0.00092EPSS
Exploits0
Patchstack
Patchstack
added 2026/04/13 2:16 p.m.2 views

WordPress Product Filter by WBW plugin <= 3.1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by daroo in WordPress Plugin Product Filter by WBW versions = 3.1.2...

6AI score
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/26 3:17 p.m.0 views

CVE-2026-32410

Missing Authorization vulnerability in WBW Plugins WBW Currency Switcher for WooCommerce woo-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WBW Currency Switcher for WooCommerce: from n/a through = 2.2.5...

5.3CVSS5.8AI score0.00042EPSS
Exploits0References1
NVD
NVD
added 2026/03/13 7:54 p.m.2 views

CVE-2026-32410

Missing Authorization vulnerability in WBW Plugins WBW Currency Switcher for WooCommerce woo-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WBW Currency Switcher for WooCommerce: from n/a through = 2.2.5...

5.3CVSS0.00042EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/13 11:42 a.m.23 views

CVE-2026-32410 WordPress WBW Currency Switcher for WooCommerce plugin <= 2.2.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in WBW Plugins WBW Currency Switcher for WooCommerce woo-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WBW Currency Switcher for WooCommerce: from n/a through = 2.2.5...

5.3CVSS0.00042EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/13 11:42 a.m.1 views

CVE-2026-32410 WordPress WBW Currency Switcher for WooCommerce plugin <= 2.2.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in WBW Plugins WBW Currency Switcher for WooCommerce woo-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WBW Currency Switcher for WooCommerce: from n/a through = 2.2.5...

5.8AI score0.00042EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.2 views

WordPress plugin WBW Currency Switcher for WooCommerce 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

5.3CVSS5.8AI score0.00042EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/25 6:49 a.m.2 views

CVE-2025-8416 Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection

The Product Filter by WBW plugin for WordPress is vulnerable to SQL Injection via the 'filtersDataBackend' parameter in all versions up to, and including, 2.9.7. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

7.5CVSS6.3AI score0.00123EPSS
Exploits0References4
OSV
OSV
added 2025/10/25 6:15 a.m.1 views

CVE-2025-11269

The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'approveNotice' action in all versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to update the plugin's settings...

5.3CVSS5.4AI score
Exploits0References3
Cvelist
Cvelist
added 2025/10/25 5:31 a.m.4 views

CVE-2025-11269 Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update

The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'approveNotice' action in all versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to update the plugin's settings...

5.3CVSS0.00109EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/25 5:31 a.m.1 views

CVE-2025-11269 Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update

The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'approveNotice' action in all versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to update the plugin's settings...

5.3CVSS4.9AI score0.00109EPSS
Exploits0References3
CVE
CVE
added 2025/10/25 5:31 a.m.10 views

CVE-2025-11269

CVE-2025-11269 affects the WordPress plugin Product Filter by WBW (versions

5.3CVSS5AI score0.00109EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/10/25 1:53 a.m.2 views

WordPress Product Filter by WBW plugin <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update vulnerability

Missing Authorization to Unauthenticated Settings Update vulnerability discovered by Lucas Montes Nirox in WordPress Plugin Product Filter by WBW versions = 3.0.0...

5.3CVSS6.7AI score0.00109EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/25 12:0 a.m.1 views

PT-2025-43726

Name of the Vulnerable Software and Affected Versions Product Filter by WBW versions up to and including 2.9.7 Description The Product Filter by WBW plugin for WordPress is susceptible to SQL Injection via the filtersDataBackend parameter. Insufficient input validation and inadequate SQL query...

7.5CVSS6.9AI score0.00123EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2025/10/25 12:0 a.m.1 views

PT-2025-43705

Name of the Vulnerable Software and Affected Versions Product Filter by WBW versions up to and including 3.0.0 Description The Product Filter by WBW plugin for WordPress has a flaw where data can be modified without authorization. This is due to a missing capability check on the 'approveNotice'...

5.3CVSS6.1AI score0.00109EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-9480

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.00219EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-17496

Malicious code in bioql PyPI...

9.3CVSS6.6AI score0.00232EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-56225

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.0007EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-51449

Malicious code in bioql PyPI...

9.8CVSS8.9AI score0.00684EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/06/11 4:3 p.m.0 views

CVE-2025-31059

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in woobewoo WBW Product Table PRO woo-producttables-pro allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through = 2.2.6...

9.3CVSS5.9AI score0.00232EPSS
Exploits0References1
Rows per page
Query Builder