CVE-2018-8711

The CVE-2018-8711 entry concerns the WooCommerce Products Filter (WOOF) WordPress plugin prior to 2.2.0. The vulnerability arises from insufficient validation of arguments in render_html before it is passed to PHP’s extract(), allowing an attacker-supplied input to overwrite the $pagepath variabl...