woobewoo vulnerabilities
13 published CVEs name woobewoo among the affected products.
- 13Published CVEs13 of them scored
- 5Last 12 monthspublished in the last year
- 2Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-105150
Product Filter for WooCommerce by WBW <= 3.4.5 - Reflected Cross-Site Scripting via 'text_no_products' Parameter
woobewoo · Product Filter for WooCommerce by WBW
Medium6.1 - CVE-2026-11396
Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter
woobewoo · Product Filter for WooCommerce by WBW
Medium5.3 - CVE-2026-88942
Product Filter for WooCommerce by WBW <= 3.4.6 - Reflected Cross-Site Scripting via 'wpf_fid' JSON Parameter
woobewoo · Product Filter for WooCommerce by WBW
Medium6.1 - CVE-2026-7804
Product Filter for WooCommerce by WBW <= 3.4.2 - Reflected Cross-Site Scripting via 'wpf_fid' Parameter
woobewoo · Product Filter for WooCommerce by WBW
Medium6.1 - CVE-2026-3138
Product Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE
woobewoo · Product Filter for WooCommerce by WBW
Medium6.5 - CVE-2025-8416
Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection
woobewoo · Product Filter for WooCommerce by WBW
High7.5 - CVE-2025-11269
Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update
woobewoo · Product Filter for WooCommerce by WBW
Medium5.3 - CVE-2025-31059
WordPress WBW Product Table PRO plugin <= 2.2.6 - SQL Injection vulnerability
woobewoo · WBW Product Table PRO
Critical9.3 - CVE-2025-2317
Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter
woobewoo · Product Filter for WooCommerce by WBW
High7.5 - CVE-2024-13234
Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection
woobewoo · Product Table for WooCommerce by WBW
High7.5