woobewoo vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20255
3. 20264

Newest CVEs

• CVE-2026-11396

  Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter

  woobewoo · Product Filter for WooCommerce by WBW

  Medium5.3
• CVE-2026-88942

  Product Filter for WooCommerce by WBW <= 3.4.6 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter

  woobewoo · Product Filter for WooCommerce by WBW

  Medium6.1
• CVE-2026-7804

  Product Filter for WooCommerce by WBW <= 3.4.2 - Reflected Cross-Site Scripting via 'wpf_fid' Parameter

  woobewoo · Product Filter for WooCommerce by WBW

  Medium6.1
• CVE-2026-3138

  Product Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE

  woobewoo · Product Filter for WooCommerce by WBW

  Medium6.5
• CVE-2025-8416

  Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection

  woobewoo · Product Filter for WooCommerce by WBW

  High7.5
• CVE-2025-11269

  Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update

  woobewoo · Product Filter for WooCommerce by WBW

  Medium5.3
• CVE-2025-31059

  WordPress WBW Product Table PRO plugin <= 2.2.6 - SQL Injection vulnerability

  woobewoo · WBW Product Table PRO

  Critical9.3
• CVE-2025-2317

  Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter

  woobewoo · Product Filter for WooCommerce by WBW

  High7.5
• CVE-2024-13234

  Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection

  woobewoo · Product Table for WooCommerce by WBW

  High7.5
• CVE-2023-50877

  WordPress Product Filter by WBW plugin <= 2.5.0 - Broken Access Control vulnerability

  woobewoo · Product Filter by WBW

  Medium4.3