Critical · 9.3 CVE-2025-39496 EUVD-2025-25963GHSA-3j3g-j654-w22x

WordPress WooBeWoo Product Filter Pro plugin < 2.9.6 - SQL Injection vulnerability

Published Aug 28, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WBW Product: WooBeWoo Product Filter Pro

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter Pro allows SQL Injection.This issue affects WooBeWoo Product Filter Pro: from n/a before 2.9.6.

Affected products

Vendor	Product	Affected	Fixed
WBW	WooBeWoo Product Filter Pro	< 2.9.6	2.9.6

References

https://patchstack.com/database/wordpress/plugin/woofilter-pro/vulnerability/wordpress-woobewoo-product-filter-pro-plugin-2-7-6-sql-injection-vulnerability?_s_id=cve vdb-entry