35 matches found
EUVD-2026-65161
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...
CVE-2026-32554
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...
CVE-2026-32554 WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 - SQL Injection vulnerability
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...
CVE-2026-32554 WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 - SQL Injection vulnerability
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...
CVE-2026-32554
WooBeWoo Product Filter Pro (WordPress plugin) versions up to and including 3.1.8 are affected by an unauthenticated SQL injection vulnerability, rated CVSS 9.3 (CRITICAL) by Patchstack. The vulnerability is exploitable over the network with low complexity and no user interaction required, with a...
WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Luis Koleski in WordPress Plugin WooBeWoo Product Filter Pro versions = 3.1.8...
CVE-2026-32554: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...
PT-2026-81046
Name of the Vulnerable Software and Affected Versions WooBeWoo Product Filter Pro versions prior to 3.1.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes t...
CVE-2026-1852
The Product Pricing Table by WooBeWoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missing or incorrect nonce validation on the updateLabel and remove functions. This makes it possible for unauthenticated attackers to...
CVE-2026-1852
The Product Pricing Table by WooBeWoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missing or incorrect nonce validation on the updateLabel and remove functions. This makes it possible for unauthenticated attackers to...
CVE-2026-1852 Product Pricing Table by WooBeWoo <= 1.1.0 - Cross-Site Request Forgery to Stored XSS and Pricing Table Deletion
The Product Pricing Table by WooBeWoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missing or incorrect nonce validation on the updateLabel and remove functions. This makes it possible for unauthenticated attackers to...
CVE-2026-1852
Summary: CVE-2026-1852 affects the Product Pricing Table by WooBeWoo WordPress plugin. It is a Cross-Site Request Forgery (CSRF) vulnerability with stored XSS implications due to missing/incorrect nonce validation on the updateLabel() and remove() functions, in all versions up to 1.1.0. This allo...
PT-2026-33055
Name of the Vulnerable Software and Affected Versions Product Pricing Table by WooBeWoo versions prior to 1.1.1 Description The Product Pricing Table by WooBeWoo plugin for WordPress is susceptible to Cross-Site Request Forgery. This issue occurs because of missing or incorrect nonce validation i...
CVE-2026-1852: Cross-Site Request Forgery (CSRF)
The Product Pricing Table by WooBeWoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0. This is due to missing or incorrect nonce validation on the updateLabel and remove functions. This makes it possible for unauthenticated attackers to...
CVE-2023-50877
Missing Authorization vulnerability in woobewoo Product Filter by WBW allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Filter by WBW: from n/a through 2.5.0...
EUVD-2024-43543
Malicious code in bioql PyPI...
EUVD-2025-25963
Malicious code in bioql PyPI...
EUVD-2025-17496
Malicious code in bioql PyPI...
EUVD-2023-55610
Malicious code in bioql PyPI...
CVE-2025-39496
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WBW WooBeWoo Product Filter Pro allows SQL Injection.This issue affects WooBeWoo Product Filter Pro: from n/a before 2.9.6...