All 7 CVE vulnerabilities found in Product Filter for WooCommerce by WBW, with AI-generated Chinese analysis, references, and POCs.
Vendor: woobewoo
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-7804 | Product Filter for WooCommerce by WBW <= 3.4.2 - Reflected Cross-Site Scripting via 'wpf_fid' Parameter CWE-79 | 6.1 | Medium | 2026-09-09 |
| CVE-2026-3830 | Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQLi | 9.8 | - | 2026-04-13 |
| CVE-2026-3138 | Product Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE CWE-862 | 6.5 | Medium | 2026-03-24 |
| CVE-2025-8416 | Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection CWE-89 | 7.5 | High | 2025-10-25 |
| CVE-2025-11269 | Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update CWE-862 | 5.3 | Medium | 2025-10-25 |
| CVE-2025-2317 | Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter CWE-89 | 7.5 | High | 2025-04-04 |
| CVE-2021-4444 | Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization CWE-862 | 7.3 | High | 2024-10-16 |
All 7 known CVE vulnerabilities affecting Product Filter for WooCommerce by WBW with full Chinese analysis, references, and POCs where available.