Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:55 a.m.7 views

CVE-2023-40010

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in realmag777 HUSKY – Products Filter for WooCommerce Professional.This issue affects HUSKY – Products Filter for WooCommerce Professional: from n/a through 1.3.4.2...

9.8CVSS8.9AI score0.00588EPSS
Exploits0References1
WPVulnDB
WPVulnDB
added 2024/03/18 12:0 a.m.27 views

HUSKY – Products Filter for WooCommerce Professional < 1.3.5.3 - Contributor+ SQL Injection

Description The HUSKY – Products Filter for WooCommerce Professional plugin is vulnerable to SQL Injection via the 'name' parameter in the woof shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already...

8.8CVSS7.3AI score0.00565EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/03/15 7:15 a.m.8 views

CVE-2024-1796

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'woof' shortcode in all versions up to, and including, 1.3.5.1 due to insufficient input sanitization and output escaping on user supplied attributes such as...

6.4CVSS5.7AI score0.00346EPSS
Exploits0References2
NVD
NVD
added 2024/03/15 7:15 a.m.11 views

CVE-2024-1795

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to SQL Injection via the 'name' parameter in the woof shortcode in all versions up to, and including, 1.3.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...

8.8CVSS8.7AI score0.00565EPSS
Exploits0References2
OSV
OSV
added 2024/03/15 7:15 a.m.1 views

CVE-2024-1795

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to SQL Injection via the 'name' parameter in the woof shortcode in all versions up to, and including, 1.3.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...

8.8CVSS7.3AI score0.00565EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/03/15 6:48 a.m.12 views

CVE-2024-1795 HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to SQL Injection via the 'name' parameter in the woof shortcode in all versions up to, and including, 1.3.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ...

8.8CVSS7.2AI score0.00565EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/03/15 6:48 a.m.12 views

CVE-2024-1796 HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'woof' shortcode in all versions up to, and including, 1.3.5.1 due to insufficient input sanitization and output escaping on user supplied attributes such as...

6.4CVSS7.4AI score0.00346EPSS
Exploits0References2
OSV
OSV
added 2023/12/29 1:15 p.m.1 views

CVE-2023-51505

Deserialization of Untrusted Data vulnerability in realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store.This issue affects Active Products Tables for WooCommerce. Professional products tables for WooCommerce store : from n/a through 1.0.6...

9.8CVSS7.3AI score
Exploits0References1
OSV
OSV
added 2023/12/20 3:15 p.m.2 views

CVE-2023-40010

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in realmag777 HUSKY – Products Filter for WooCommerce Professional.This issue affects HUSKY – Products Filter for WooCommerce Professional: from n/a through 1.3.4.2...

9.8CVSS7.3AI score0.00588EPSS
Exploits0References1
NVD
NVD
added 2023/12/20 3:15 p.m.10 views

CVE-2023-40010

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in realmag777 HUSKY – Products Filter for WooCommerce Professional.This issue affects HUSKY – Products Filter for WooCommerce Professional: from n/a through 1.3.4.2...

9.8CVSS0.00588EPSS
Exploits0References1
Prion
Prion
added 2023/12/20 3:15 p.m.20 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in realmag777 HUSKY – Products Filter for WooCommerce Professional.This issue affects HUSKY – Products Filter for WooCommerce Professional: from n/a through 1.3.4.2...

7.5CVSS8AI score0.00588EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/12/20 3:6 p.m.47 views

CVE-2023-40010

CVE-2023-40010 is an unauthenticated SQL injection in the WordPress HUSKY – Products Filter for WooCommerce Professional plugin (

9.8CVSS8.9AI score0.00588EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder