TI-2026-29394 CVE-2026-40725 · GHSA-cw6w-c36v-qj74
WordPress WooCommerce Product Filters plugin < 2.0.6 - PHP Object Injection vulnerability
Priority MEDIUM 49
Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.
No barn2media vulnerabilities are listed in CISA KEV.
3 records
Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.
The Document Library Lite plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 1.1.6.
The Posts Table with Search & Sort plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'date_format' parameter in all versions up to, and including, 1.4.14 due to insufficient input sanitization and…