Read the docs

woobewoo

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

woobewoo records in CISA KEV

No woobewoo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Product Table 3 records MEDIUM Wbw Currency Switcher For Woocommerce 1 record LOW

Records

3 records in Product Table · all components

TI-2024-29507 CVE-2024-43918 · GHSA-76xq-3xgg-jfmh

WordPress WBW Product Table PRO plugin <= 1.9.4 - Unauthenticated Arbitrary SQL Query Execution vulnerability

Priority MEDIUM 52

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01474 Published 2024-08-29 No fix listed CWE-89
TI-2024-12278 CVE-2024-13234 · GHSA-6mgf-94xq-664g

Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection

Priority MEDIUM 49

The Product Table by WBW plugin for WordPress is vulnerable to SQL Injection via the 'additionalCondition' parameter in all versions up to, and including, 2.1.2 due to insufficient escaping on the user supplied parameter…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2025-01-23 No fix listed CWE-89
Open these records in search →