Description
Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WBW Plugins | Product Filter by WBW | ≤ 3.1.7 | — |
Critical · 9.3
CVE-2026-95601
EUVD-2026-85504GHSA-99f5-94c9-vwcj
WordPress Product Filter by WBW plugin <= 3.1.7 - SQL Injection vulnerability
Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack