Skip to content
OpenAdvisories

Vendor

shamimmoeen

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-3396 Scanner template

    WCAPF – WooCommerce Ajax Product Filter <= 4.2.3 - Unauthenticated Time-Based SQL Injection

    WCAPF – WooCommerce Ajax Product Filter plugin is vulnerable to time-based SQL Injection via the 'post-author' parameter in all versions up to, and including, 4.2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation…