CVE-2026-11396

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the 'filterSettingsdefaultquery' parameter of the 'filtersFrontend' AJAX action. The handler is registered as...

CVE-2026-11396 Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the 'filterSettingsdefaultquery' parameter of the 'filtersFrontend' AJAX action. The handler is registered as...

EUVD-2026-114617

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the 'filterSettingsdefaultquery' parameter of the 'filtersFrontend' AJAX action. The handler is registered as...

CVE-2026-11396

The Product Filter for WooCommerce by WBW plugin for WordPress (versions up to and including 3.4.6 ) is vulnerable to Missing Authorization leading to Information Disclosure . The issue exists in the filtersFrontend AJAX action (registered as wp_ajax_nopriv_filtersFrontend), which fails to perfor...

CVE-2026-11396: woobewoo Product Filter for WooCommerce by WBW: The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information…

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the 'filterSettingsdefaultquery' parameter of the 'filtersFrontend' AJAX action. The handler is registered as...