Lucene search
+L

1 matches found

OSV
OSV
added 2025/10/25 5:31 a.m.8 views

CVE-2025-11269 Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update

The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'approveNotice' action in all versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to update the plugin's settings...

5.3CVSS5.9AI score
SaveExploits0References5
Rows per page
Query Builder