Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

woobewoo — Vulnerabilities & Security Advisories 10

Browse all 10 CVE security advisories affecting woobewoo. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Woobewoo operates as a web application framework primarily used for building dynamic content management systems. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for its nine recorded CVEs. The framework's security posture has been compromised through insecure deserialization and improper input validation, leading to several high-severity incidents. Notably, multiple versions contained authentication bypass weaknesses that allowed unauthorized administrative access. Woobewoo's widespread adoption in enterprise environments has made it a consistent target for exploitation, with several zero-day vulnerabilities discovered before patches were available.

CVE ID Title CVSS Severity Published
CVE-2026-7804 Product Filter for WooCommerce by WBW <= 3.4.2 - Reflected Cross-Site Scripting via 'wpf_fid' Parameter — Product Filter for WooCommerce by WBW CWE-79 6.1 Medium 2026-09-09
CVE-2026-3138 Product Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE — Product Filter for WooCommerce by WBW CWE-862 6.5 Medium 2026-03-24
CVE-2025-8416 Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection — Product Filter for WooCommerce by WBW CWE-89 7.5 High 2025-10-25
CVE-2025-11269 Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update — Product Filter for WooCommerce by WBW CWE-862 5.3 Medium 2025-10-25
CVE-2025-31059 WordPress WBW Product Table PRO plugin <= 2.2.6 - SQL Injection vulnerability — WBW Product Table PRO CWE-89 9.3 Critical 2025-06-09
CVE-2025-2317 Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter — Product Filter for WooCommerce by WBW CWE-89 7.5 High 2025-04-04
CVE-2024-13234 Product Table by WBW <= 2.1.2 - Unuthenticated SQL Injection — Product Table for WooCommerce by WBW CWE-89 7.5 High 2025-01-23
CVE-2023-50877 WordPress Product Filter by WBW plugin <= 2.5.0 - Broken Access Control vulnerability — Product Filter by WBW CWE-862 4.3 Medium 2024-12-09
CVE-2021-4444 Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization — Product Filter for WooCommerce by WBW CWE-862 7.3 High 2024-10-16
CVE-2024-6365 Product Table by WBW <= 2.0.1 - Unauthenticated Remote Code Execution — Product Table for WooCommerce by WBW CWE-94 9.8 Critical 2024-07-09

This page lists every published CVE security advisory associated with woobewoo. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.