CVE-2026-7804

The Product Filter for WooCommerce by WBW WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the wpf_fid parameter in all versions up to and including 3.4.2 . The root cause is insufficient input sanitization and output escaping , allowing unauthenticated attackers to inject arb...

EUVD-2026-74601

The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpffid' parameter in all versions up to, and including, 3.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...