| CVE-2024-6481 | Search Filter Pro < 2.5.18 - Admin+ Stored XSS | Unknown | Search & Filter Pro | - | - | 2024-08-08 06:00:04 | Deep Dive |
| CVE-2024-39647 | WordPress Message Filter for Contact Form 7 plugin <= 1.6.1.1 - Cross Site Scripting (XSS) vulnerability | Kofi Mokome | Message Filter for Contact Form 7 | High | 7.1 | 2024-08-01 22:09:42 | Deep Dive |
| CVE-2024-39665 | WordPress Filter & Grids plugin <= 2.9.2 - Cross Site Scripting (XSS) vulnerability | YMC | Filter & Grids | Medium | 6.5 | 2024-08-01 21:34:57 | Deep Dive |
| CVE-2024-37943 | WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.1.0 - Reflected Cross Site Scripting (XSS) vulnerability | YITHEMES | YITH WooCommerce Ajax Product Filter | Medium | 5.8 | 2024-07-20 08:54:23 | Deep Dive |
| CVE-2024-6164 | Filter & Grids < 2.8.33 - Unauthenticated LFI | Unknown | Filter & Grids | - | - | 2024-07-18 06:00:04 | Deep Dive |
| CVE-2024-6457 | HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection | realmag777 | HUSKY – Products Filter Professional for WooCommerce | Critical | 9.8 | 2024-07-16 11:00:59 | Deep Dive |
| CVE-2024-4667 | Blog, Posts and Category Filter for Elementor <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post and Category Filter Widget | plugindevs | Blog, Posts and Category Filter for Elementor | Medium | 6.4 | 2024-07-09 04:32:56 | Deep Dive |
| CVE-2024-6027 | Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter | themifyme | Themify – WooCommerce Product Filter | Critical | 9.8 | 2024-06-21 09:39:38 | Deep Dive |
| CVE-2024-32081 | WordPress Filter Custom Fields & Taxonomies Light plugin <= 1.05 - Broken Access Control vulnerability | Websupporter | Filter Custom Fields & Taxonomies Light | Medium | 4.3 | 2024-06-09 18:37:06 | Deep Dive |
| CVE-2024-31359 | WordPress Premmerce Product Filter for WooCommerce plugin <= 3.7.2 - Broken Access Control vulnerability | Premmerce | Premmerce Product Filter for WooCommerce | Medium | 4.3 | 2024-06-09 17:20:48 | Deep Dive |
| CVE-2024-32818 | WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability | realmag777 | WordPress Meta Data and Taxonomies Filter (MDTF) | Medium | 4.3 | 2024-06-09 12:37:11 | Deep Dive |
| CVE-2024-5039 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | realmag777 | HUSKY – Products Filter Professional for WooCommerce | Medium | 6.4 | 2024-05-29 12:43:42 | Deep Dive |
| CVE-2024-32680 | WordPress HUSKY plugin <= 1.3.5.2 - Remote Code Execution (RCE) vulnerability | PluginUS | HUSKY – Products Filter for WooCommerce (formerly WOOF) | High | 8.8 | 2024-05-17 08:59:16 | Deep Dive |
| CVE-2024-34434 | WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.2 - Arbitrary Shortcode Execution vulnerability | realmag777 | WordPress Meta Data and Taxonomies Filter (MDTF) | Medium | 6.5 | 2024-05-17 08:11:18 | Deep Dive |
| CVE-2024-4446 | Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via pagingType Parameter | pt-guy | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | Medium | 6.4 | 2024-05-09 20:03:30 | Deep Dive |
| CVE-2024-3929 | Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Post Overlay | pt-guy | Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor) | Medium | 6.4 | 2024-04-25 07:33:58 | Deep Dive |
| CVE-2024-31094 | WordPress Filter Custom Fields & Taxonomies Light plugin <= 1.05 - PHP Object Injection vulnerability | Filter Custom Fields & Taxonomies Light | Filter Custom Fields & Taxonomies Light | - | - | 2024-03-31 18:03:50 | Deep Dive |
| CVE-2024-30462 | WordPress HUSKY plugin <= 1.3.5.1 - Cross Site Request Forgery (CSRF) vulnerability | realmag777 | HUSKY – Products Filter for WooCommerce (formerly WOOF) | Medium | 4.3 | 2024-03-29 16:24:54 | Deep Dive |
| CVE-2024-30457 | WordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability | realmag777 | WordPress Meta Data and Taxonomies Filter (MDTF) | Medium | 4.3 | 2024-03-29 13:06:21 | Deep Dive |
| CVE-2024-3061 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion | realmag777 | HUSKY – Products Filter Professional for WooCommerce | High | 7.2 | 2024-03-29 09:31:07 | Deep Dive |