TI-2026-63650 CVE-2026-95601 · GHSA-99f5-94c9-vwcj
WordPress Product Filter by WBW plugin <= 3.1.7 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions.
WBW Plugins
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
WBW Plugins records in CISA KEVNo WBW Plugins vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2026-28468 CVE-2026-39494 · GHSA-hg8f-fjxw-frxj
WordPress Product Filter by WBW plugin <= 3.1.2 - SQL Injection vulnerability
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Product Filter by WBW allows Blind SQL Injection.
TI-2024-33177 CVE-2024-49691 · GHSA-j3c5-q947-5wxr
WordPress Product Filter by WBW plugin <= 2.7.0 - SQL Injection vulnerability
Priority LOW 34
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Product Filter by WBW woo-product-filter allows SQL Injection.This issue affects Product Filter by WBW: fr…
TI-2025-22356 CVE-2025-31086 · GHSA-7x57-hhw5-3367
WordPress Product Table by WBW plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WBW Plugins Product Table by WBW woo-product-tables allows Reflected XSS.This issue affects Product Table by WBW: from…
TI-2026-24938 CVE-2026-32410 · GHSA-vfvq-vr53-w2jg
WordPress WBW Currency Switcher for WooCommerce plugin <= 2.2.5 - Broken Access Control vulnerability
Priority LOW 29
Missing Authorization vulnerability in WBW Plugins WBW Currency Switcher for WooCommerce woo-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WBW Currency Switcher for W…