Plugin icon

Product Filter for WooCommerce by WBW

woo-product-filter

Vulnerabilities:

10

Last Updated:

October 6, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2026-09-23
Title
Product Filter for WooCommerce by WBW < 3.1.8 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.1.8
CVSS
7.5 (high)
Published
2026-09-08
Title
Product Filter for WooCommerce by WBW < 3.4.3 - Reflected Cross-Site Scripting via 'wpf_fid' Parameter
Fixed in
Fixed in 3.4.3
CVSS
6.1 (medium)
Published
2026-04-13
Title
Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.1.3
CVSS
7.5 (high)
Published
2026-03-23
Title
Product Filter for WooCommerce by WBW < 3.1.3 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE
Fixed in
Fixed in 3.1.3
CVSS
6.5 (medium)
Published
2026-03-23
Title
Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQLi
Fixed in
Fixed in 3.1.3
CVSS
8.6 (high)
Published
2025-10-24
Title
Product Filter by WBW < 3.0.1 - Missing Authorization to Unauthenticated Settings Update
Fixed in
Fixed in 3.0.1
CVSS
5.3 (medium)
Published
2025-10-24
Title
Product Filter by WBW < 2.9.8 - Unauthenticated SQL Injection
Fixed in
Fixed in 2.9.8
CVSS
7.5 (high)
Published
2025-04-03
Title
Product Filter by WBW < 2.8.0 - Unauthenticated SQL Injection via filtersDataBackend Parameter
Fixed in
Fixed in 2.8.0
CVSS
7.5 (high)
Published
2024-10-21
Title
Product Filter by WBW < 2.7.1 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 2.7.1
CVSS
4.9 (medium)
Published
2023-12-26
Title
Product Filter by WBW < 2.5.1 - Subscriber+ Table Data Access
Fixed in
Fixed in 2.5.1
CVSS
4.3 (medium)