CVE-2025-1661

CVE-2025-1661 Exploit for CVE-2025-1661 - HUSKY – Products Filter Professional for WooCommerce 1.3.6.6 PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

CVE-2025-1661

CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...

CVE-2025-1661

CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...

HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the wooftextsearch AJAX action. This makes it possible for unauthenticated attackers to include and...

CVE-2026-107646

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woofsettingswoofstatserveroptions' parameter. This makes it possible for unauthenticated attackers to extract the...

CVE-2026-107646

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 1.4.5 . The flaw exists in the 'woof_settings[woof_stat][server_options]' parameter, which allows unauthenticated attackers to extract ...

CVE-2026-107646 HUSKY <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woofsettingswoofstatserveroptions' parameter. This makes it possible for unauthenticated attackers to extract the...

EUVD-2026-102783

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woofsettingswoofstatserveroptions' parameter. This makes it possible for unauthenticated attackers to extract the...

CVE-2026-107646 HUSKY <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woofsettingswoofstatserveroptions' parameter. This makes it possible for unauthenticated attackers to extract the...

CVE-2026-107646: Exposure of Sensitive Information to an Unauthorized Actor

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'woofsettingswoofstatserveroptions' parameter. This makes it possible for unauthenticated attackers to extract the...

PT-2026-115486

Name of the Vulnerable Software and Affected Versions HUSKY – Products Filter for WooCommerce Professional versions prior to 1.4.6 Description An issue exists that allows unauthenticated attackers to extract sensitive database credentials, including the external MySQL host, database name, usernam...

WordPress HUSKY plugin <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script vulnerability

Unauthenticated Sensitive Information Exposure in 'wooftmdata' Localized Script vulnerability discovered by Sawyer in WordPress Plugin HUSKY versions = 1.4.5...

RealMag777 HUSKY – WooCommerce Professional Product Filter vulnerability

RealMag777 HUSKY – The product filter for WooCommerce Professional versions 1.4.5 and earlier has a vulnerability that leads to information leakage. This vulnerability arises from improper handling of the parameter ‘woofsettingswoofstatserveroptions’, which allows sensitive information to be...

CVE-2026-95608

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...

CVE-2026-95608 WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...

EUVD-2026-95597

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...

CVE-2026-95608

The PluginUs.Net HUSKY woocommerce-products-filter WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 1.4.3.2 . An attacker could potentially execute ma...

CVE-2026-95608 WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...

PT-2026-108845

Name of the Vulnerable Software and Affected Versions PluginUs.Net HUSKY woocommerce-products-filter versions prior to 1.4.3.3 Description Improper neutralization of input during web page generation leads to Reflected Cross-site Scripting XSS, a flaw where an application includes untrusted data i...

CVE-2026-95608: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2...