WBW Plugins Vulnerabilities and Affected Products
Vulnerabilities associated with Product Filter by WBW.
Products
Clear product- Product Filter by WBW2 vulnerabilities
- Product Table by WBW1 vulnerability
- WBW Currency Switcher for WooCommerce1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-39494CRITICAL | WordPress Product Filter by WBW plugin <= 3.1.2 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Product Filter by WBW allows Blind SQL Injection. This issue affects Product Filter by WBW: from n/a through 3.1.2. CWE-89Jun 11, 2026 | CVSS9.3v3.1 | EPSS0.39% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-49691HIGH | WordPress Product Filter by WBW plugin <= 2.7.0 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Product Filter by WBW woo-product-filter allows SQL Injection.This issue affects Product Filter by WBW: from n/a through <= 2.7.0. CWE-89Oct 24, 2024 | CVSS7.6v3.1 | EPSS0.418% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |