Skip to content
OpenAdvisories

Vendor

woobewoo

13 known vulnerabilities.

Products

Product Filter for WooCommerce by WBW 9 Product Table for WooCommerce by WBW 2 WBW Product Table PRO 1 Product Filter by WBW 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-105150

    Product Filter for WooCommerce by WBW <= 3.4.5 - Reflected Cross-Site Scripting via 'text_no_products' Parameter

    The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'text_no_products' parameter in all versions up to, and including, 3.4.5 due to insufficient input sanitization and output escaping. This ma…

    woobewoo Product Filter for WooCommerce by WBW Web / CMS
  • Medium 5.3
    CVE-2026-11396

    Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter

    The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the 'filterSettings[default_query]' parameter of the 'filtersFrontend' AJAX action. …

    woobewoo Product Filter for WooCommerce by WBW Web / CMS
  • Medium 6.1
    CVE-2026-88942

    Product Filter for WooCommerce by WBW <= 3.4.6 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter

    The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter in all versions up to, and including, 3.4.6 due to insufficient input sanitization and output escaping. This makes it p…

    woobewoo Product Filter for WooCommerce by WBW Web / CMS
  • Medium 6.1
    CVE-2026-7804

    Product Filter for WooCommerce by WBW <= 3.4.2 - Reflected Cross-Site Scripting via 'wpf_fid' Parameter

    The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpf_fid' parameter in all versions up to, and including, 3.4.2 due to insufficient input sanitization and output escaping. This makes it po…

    woobewoo Product Filter for WooCommerce by WBW Web / CMS
  • Medium 6.5
    CVE-2026-3138

    Product Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE

    The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check in all versions up to, and including, 3.1.2. This is due to the plugin's MVC framework dynamically registering unauthentic…

    woobewoo Product Filter for WooCommerce by WBW Web / CMS
  • Medium 5.3
    CVE-2025-11269

    Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update

    The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'approveNotice' action in all versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers…

    woobewoo Product Filter for WooCommerce by WBW Web / CMS
  • Medium 4.3
    CVE-2023-50877

    WordPress Product Filter by WBW plugin <= 2.5.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in woobewoo Product Filter by WBW allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Filter by WBW: from n/a through 2.5.0.

    woobewoo Product Filter by WBW