Product Filter for WooCommerce by WBW

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Product Filter for WooCommerce by WBW

Information

Software Type Plugin
Software Slug woo-product-filter (view on wordpress.org)
Software Status Removed
Software Author woobewoo
Software Website woobewoo.com
Software Downloads 2,767,022
Software Active Installs 60,000
Software Record Last Updated April 27, 2026

9 Vulnerabilities

Submit a Vulnerability
Product Filter for WooCommerce by WBW <= 3.1.2 - Unauthenticated SQL Injection
7.5
CVE-2026-39494
Apr 13, 2026
Researcher: daroo
Product Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE
6.5
CVE-2026-3138
Mar 23, 2026
Researcher: Youssef Elouaer
Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQL Injection
7.5
CVE-2026-3830
Mar 23, 2026
Researcher: Drew Webber (mcdruid)
Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update
5.3
CVE-2025-11269
Oct 24, 2025
Researcher: Lucas Montes (NiRoX)
Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection
7.5
CVE-2025-8416
Oct 24, 2025
Researcher: mikemyers
Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter
7.5
CVE-2025-2317
Apr 3, 2025
Researcher: Trương Hữu Phúc (truonghuuphuc)
Product Filter by WBW <= 2.7.0 - Authenticated (Administrator+) SQL Injection
4.9
CVE-2024-49691
Oct 21, 2024
Researcher: Hakiduck
Product Filter by WBW <= 2.5.0 - Missing Authorization via getListForTbl
4.3
CVE-2023-50877
Dec 26, 2023
Researcher: Abdi Pranata
Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization
7.3
CVE-2021-4444
May 7, 2021
Researcher: David Edgar
Title Status CVE ID CVSS Researchers Date
Product Filter for WooCommerce by WBW <= 3.1.2 - Unauthenticated SQL Injection Patched CVE-2026-39494 7.5 daroo April 13, 2026
Product Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLE Patched CVE-2026-3138 6.5 Youssef Elouaer March 23, 2026
Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQL Injection Patched CVE-2026-3830 7.5 Drew Webber (mcdruid) March 23, 2026
Product Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings Update Patched CVE-2025-11269 5.3 Lucas Montes (NiRoX) October 24, 2025
Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection Patched CVE-2025-8416 7.5 mikemyers October 24, 2025
Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter Patched CVE-2025-2317 7.5 Trương Hữu Phúc (truonghuuphuc) April 3, 2025
Product Filter by WBW <= 2.7.0 - Authenticated (Administrator+) SQL Injection Patched CVE-2024-49691 4.9 Hakiduck October 21, 2024
Product Filter by WBW <= 2.5.0 - Missing Authorization via getListForTbl Patched CVE-2023-50877 4.3 Abdi Pranata December 26, 2023
Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization Patched CVE-2021-4444 7.3 David Edgar May 7, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation