WBW vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.4%	CVE-2026-32554WooBeWoo Product Filter Pro (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-08-24CVE Database V5CVE-2026-32554 CVE-2026-32554 is a critical SQL Injection vulnerability in WooBeWoo Product Filter Pro versions up to and including 3.1.8. The flaw allows unauthenticated attackers to inject SQL commands due to improper neutralization of special elements in SQL queries. This vulnerability can lead to high confidentiality impact and low availability impact, with no privileges or user interaction required for exploitation. EPSS 0.4%Vulnerability WBW CWE-89	CVE Database V5	2026-08-24
Critical	9.3	EPSS 0.3%	CVE-2025-39496WooBeWoo Product Filter Pro (WordPress plugin) · SQL Injection Critical9.3EPSS 0.3%2025-08-28CVE Database V5CVE-2025-39496 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter Pro allows SQL Injection.This issue affects WooBeWoo Product Filter Pro: from n/a before 2.9.6. EPSS 0.3%Vulnerability WBW CWE-89	CVE Database V5	2025-08-28
Critical	10.0	EPSS 1.5%	CVE-2024-43918WBW Product Table PRO (WordPress plugin) · SQL Injection Critical10.0EPSS 1.5%2024-08-29CVE Database V5CVE-2024-43918 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4. EPSS 1.5%Vulnerability CWE-89	CVE Database V5	2024-08-29

Page 1 of 1