woo-product-filter vulnerabilities
CVEs whose affected-version data names the woo-product-filter package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112866Critical· 9.3PoCWordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a throug…
▾ AbyssalWPFactory · woo-product-filterEPSS 0.36%via CVEORG
CVE-2026-95601Critical· 9.3Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions.
Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions.
▾ MidnightWBW Plugins · woo-product-filterEPSS 0.28%via NVD