Skip to content
OpenAdvisories

Vendor

woobewoo

13 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.3

    WordPress WBW Product Table PRO plugin <= 2.2.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in woobewoo WBW Product Table PRO woo-producttables-pro allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through <= 2.2.6.

  • Critical 9.8

    Product Table by WBW <= 2.0.1 - Unauthenticated Remote Code Execution

    The Product Table by WBW plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'saveCustomTitle' function. This is due to missing authorization and lack of sanitization of appended data in the language…