Threats tagged 'ghsa-xhg4-2xwf-g98x'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-11396The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Medium5.32026-10-31GCVE DatabaseCVE-2026-11396 The Product Filter for WooCommerce by WBW plugin for WordPress up to version 3.4.6 has a missing authorization vulnerability in its 'filtersFrontend' AJAX action. This flaw allows unauthenticated attackers to manipulate query parameters and enumerate non-public WooCommerce products, including drafts and pending items, and to perform unbounded queries that retrieve all products in a single request. Report on CVE-2026-11396 Vulnerability CWE-862 #ghsa-xhg4-2xwf-g98x	GCVE Database	2026-10-31

Page 1 of 1