woobewoo
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Product Filter for WooCommerce by WBW | 8 | – | Oct 31, 2026 |
| Product Table for WooCommerce by WBW | 2 | – | Jan 23, 2025 |
| Product Filter by WBW | 1 | – | Dec 9, 2024 |
| WBW Product Table PRO | 1 | – | Jun 9, 2025 |
Exploited and recent CVEs
- CVE-2026-11396 Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter 0.2%
- CVE-2026-88942 Product Filter for WooCommerce by WBW <= 3.4.6 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter 0.3%
- CVE-2026-7804 Product Filter for WooCommerce by WBW <= 3.4.2 - Reflected Cross-Site Scripting via 'wpf_fid' Parameter 0.5%
- CVE-2026-3138 Product Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE 0.3%
- CVE-2025-8416 Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection 0.4%
- CVE-2025-11269 Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update 0.3%
- CVE-2025-31059 WordPress WBW Product Table PRO plugin <= 2.2.6 - SQL Injection vulnerability 0.4%
- CVE-2025-2317 Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter 0.5%
- CVE-2024-13234 Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection 0.5%
- CVE-2023-50877 WordPress Product Filter by WBW plugin <= 2.5.0 - Broken Access Control vulnerability 0.5%
- CVE-2021-4444 Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization 0.3%
- CVE-2024-6365 Product Table by WBW <= 2.0.1 - Unauthenticated Remote Code Execution 1.2%