CVE-2024-43918

Wordpress WBW Product Table Pro = 1.9.4 - Unauthenticated Arbitrary SQL Execution to Remote Code Execution CVE-2024-43918 The WBW Product Table Pro plugin for WordPress is vulnerable to unauthorized arbitrary SQL Execution due to a missing capability check on a function in all versions up to, and...

CVE-2026-88942

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'wpffid' JSON Parameter in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

EUVD-2026-114617

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the 'filterSettingsdefaultquery' parameter of the 'filtersFrontend' AJAX action. The handler is registered as...

CVE-2026-11396 Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the 'filterSettingsdefaultquery' parameter of the 'filtersFrontend' AJAX action. The handler is registered as...

CVE-2026-11396

The Product Filter for WooCommerce by WBW plugin for WordPress (versions up to and including 3.4.6 ) is vulnerable to Missing Authorization leading to Information Disclosure . The issue exists in the filtersFrontend AJAX action (registered as wp_ajax_nopriv_filtersFrontend), which fails to perfor...

CVE-2026-88942 Product Filter for WooCommerce by WBW <= 3.4.6 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'wpffid' JSON Parameter in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

CVE-2026-88942 Product Filter for WooCommerce by WBW <= 3.4.6 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'wpffid' JSON Parameter in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

CVE-2026-88942

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 3.4.6 . The root cause is insufficient input sanitization and output escaping of the 'wpf_fid' JSON Parameter . Specifically, while a patch was ...

CVE-2026-11396: woobewoo Product Filter for WooCommerce by WBW: The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information…

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the 'filterSettingsdefaultquery' parameter of the 'filtersFrontend' AJAX action. The handler is registered as...

CVE-2026-88942: woobewoo Product Filter for WooCommerce by WBW: The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via…

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'wpffid' JSON Parameter in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...

WordPress Product Filter for WooCommerce by WBW plugin <= 3.4.6 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by crow in WordPress Plugin Product Filter by WBW versions = 3.4.6...

WordPress Product Filter for WooCommerce by WBW plugin <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure vulnerability

Missing Authorization to Unauthenticated Information Disclosure vulnerability discovered by pradeep suvarna in WordPress Plugin Product Filter by WBW versions = 3.4.6...

WordPress Product Filter by WBW 3.4.6 SQL Injection

WordPress Product Filter by WBW versions through 3.4.6 contain an unauthenticated SQL injection vulnerability in the frontend filter AJAX flow. The proof of concept demonstrates attacker-controlled temporary-table identifier handling using a structural response oracle...

Exploit for CVE-2026-112866

CVE-2026-112866 - Product Filter by WBW Unauthenticated SQL In...

CVE-2026-112866

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a through 3.4.6...

CVE-2026-112866 WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a through 3.4.6...

EUVD-2026-109250

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a through 3.4.6...

CVE-2026-112866

The WPFactory Product Filter by WBW (woo-product-filter) plugin for WordPress is vulnerable to a Blind SQL Injection vulnerability in versions 3.4.6 and below . The root cause is the improper neutralization of special elements used in an SQL command. This flaw allows an attacker to execute malici...

CVE-2026-112866 WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a through 3.4.6...

PT-2026-122520

Name of the Vulnerable Software and Affected Versions Product Filter by WBW versions prior to 3.4.7 Description An unauthenticated Blind SQL Injection issue exists where attacker-supplied filter definitions are processed as raw SQL identifiers within DROP or CREATE TEMPORARY TABLE commands. This...