Skip to content
OpenAdvisories

Vendor

WPFactory

51 known vulnerabilities.

Products

Wishlist for WooCommerce 4 Products, Order & Customers Export for WooCommerce 3 Advanced WooCommerce Product Sales Reporting 3 EAN for WooCommerce 3 Cost of Goods for WooCommerce 3 Free Shipping Bar: Amount Left for Free Shipping for WooCommerce 2 Back Button Widget 2 Adverts 2 Product XML Feed Manager for WooCommerce 2 Min Max Step Quantity Limits Manager for WooCommerce 2 Helpdesk Support Ticket System for WooCommerce 2 Additional Custom Product Tabs for WooCommerce 2 Product Notes Tab & Private Admin Notes for WooCommerce 1 Sitewide Discount for WooCommerce: Apply Discount to All Products 1 Product Filter by WBW 1 Email Verification for WooCommerce 1 Slugs Manager 1 Maximum Products per User for WooCommerce 1 Product Excel Import Export & Bulk Edit for WooCommerce 1 Scheduled & Automatic Order Status Controller for WooCommerce 1 EU/UK VAT Manager for WooCommerce 1 Additional Custom Emails & Recipients for WooCommerce 1 Quantity Dynamic Pricing & Bulk Discounts for WooCommerce 1 Download Plugins and Themes from Dashboard 1 Change Add to Cart Button Text for WooCommerce 1 WPFactory Helper 1 WP Currency Exchange Rates 1 Awesome Shortcodes 1 CRM ERP Business Solution 1 Custom CSS, JS & PHP 1 Coupons & Add to Cart by URL Links for WooCommerce 1 Custom Checkout Fields for WooCommerce 1 MSRP (RRP) Pricing for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-112866 Public exploit

    WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a through 3.4.6.

    WPFactory Product Filter by WBW
  • Critical 9.6
    CVE-2025-39601 Public exploit

    WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP custom-css allows Remote Code Inclusion.This issue affects Custom CSS, JS & PHP: from n/a through <= 2.4.1.

    WPFactory Custom CSS, JS & PHP