woobewoo Product Filter for WooCommerce by WBW

• CVE-2026-11396 Medium 5.3 Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter 0.2%
• CVE-2026-88942 Medium 6.1 Product Filter for WooCommerce by WBW <= 3.4.6 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter 0.3%
• CVE-2026-7804 Medium 6.1 Product Filter for WooCommerce by WBW <= 3.4.2 - Reflected Cross-Site Scripting via 'wpf_fid' Parameter 0.5%
• CVE-2026-3138 Medium 6.5 Product Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE 0.3%
• CVE-2025-8416 High 7.5 Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection 0.4%
• CVE-2025-11269 Medium 5.3 Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update 0.3%
• CVE-2025-2317 High 7.5 Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter 0.5%
• CVE-2021-4444 High 7.3 Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization 0.3%