723 matches found
CVE-2026-95608
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...
CVE-2026-95608 WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...
CVE-2026-95608
The PluginUs.Net HUSKY woocommerce-products-filter WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 1.4.3.2 . An attacker could potentially execute ma...
EUVD-2026-95597
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...
CVE-2025-1661
CVE-2025-1661 استغلال لـ CVE-2025-1661 - HUSKY – Products Filter Professional for WooCommerce 1.3.6.6 تم نشر الإثبات المفاهيمي الآن. تم إنشاؤه للأغراض التعليمية/البحثية فقط! استخدمه على مسؤوليتك الخاصة!...
PT-2026-108845
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...
HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion
The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the wooftextsearch AJAX action. This makes it possible for unauthenticated attackers to include and...
CVE-2025-1661
CVE-2025-1661 - تضمين ملفات محلي غير مصادق عليه LFI في إضافة HUSKY – Products Filter Professional for WooCommerce الوصف إضافة HUSKY – Products Filter Professional for WooCommerce لنظام ووردبريس معرضة لثغرة تضمين الملفات المحلي Local File Inclusion - LFI في جميع الإصدارات حتى 1.3.6.5 وما دون، عبر...
CVE-2025-1661
CVE-2025-1661 - تضمين الملفات المحلي غير المصادق عليه LFI في HUSKY – Products Filter Professional for WooCommerce الوصف إضافة HUSKY – Products Filter Professional for WooCommerce في ووردبريس معرضة لثغرة تضمين الملفات المحلي LFI في جميع الإصدارات حتى 1.3.6.5 من خلال معامل template في إجراء AJAX با...
WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Dthangws in WordPress Plugin HUSKY versions = 1.4.3.2...
CVE-2026-92969
The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.4 via the 'shortcode' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files...
WordPress HUSKY – Products Filter for WooCommerce Professional plugin <= 1.4.4 - Unauthenticated Local File Inclusion vulnerability
Unauthenticated Local File Inclusion vulnerability discovered by crow in WordPress Plugin HUSKY versions = 1.4.4...
CVE-2026-92969 HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAX
The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.4 via the 'shortcode' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files...
CVE-2026-92969
The HUSKY – Products Filter for WooCommerce Professional WordPress plugin is vulnerable to Local File Inclusion in all versions up to and including 1.4.4 . The flaw resides in the 'shortcode' parameter passed via the woof_draw_products AJAX endpoint, specifically through the custom_tpl shortcode ...
EUVD-2026-84299
The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.4 via the 'shortcode' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files...
CVE-2026-92969 HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAX
The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.4 via the 'shortcode' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files...
PT-2026-96677
Name of the Vulnerable Software and Affected Versions HUSKY – Products Filter for WooCommerce Professional versions prior to 1.4.5 Description The plugin is subject to Local File Inclusion, a condition where an application includes files from the local file system without proper validation...
CVE-2026-92969: Improper Control of Filename for Include/Require Statement in PHP Program
The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.4 via the 'shortcode' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files...
VulnCheck KEV: CVE-2026-18562
The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via SEO-friendly permalink filter URL segments in versions up to, and including, 1.4.3. This is due to insufficient input sanitization and output escaping in the wploadjs...