Advisories · Technology
woobewoo Product Filter for WooCommerce by WBW.
Every CVE that names woobewoo Product Filter for WooCommerce by WBW among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter
- woobewoo Product Filter for WooCommerce by WBW
- Broken access control
- CVSS 6.1 Medium
Product Filter for WooCommerce by WBW <= 3.4.6 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter
- woobewoo Product Filter for WooCommerce by WBW
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Product Filter for WooCommerce by WBW <= 3.4.2 - Reflected Cross-Site Scripting via 'wpf_fid' Parameter
- woobewoo Product Filter for WooCommerce by WBW
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Product Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE
- woobewoo Product Filter for WooCommerce by WBW
- Broken access control
- CVSS 7.5 High
Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection
- woobewoo Product Filter for WooCommerce by WBW
- SQL injection
- CVSS 5.3 Medium
Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update
- woobewoo Product Filter for WooCommerce by WBW
- Broken access control
- CVSS 7.5 High
Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter
- woobewoo Product Filter for WooCommerce by WBW
- SQL injection
- CVSS 7.3 High
Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization
- woobewoo Product Filter for WooCommerce by WBW
- Broken access control