WBW Plugins vulnerabilities and threats

5 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.3%	CVE-2026-95601Product Filter by WBW (WordPress plugin) · SQL Injection Critical9.3EPSS 0.3%2026-09-23CVE Database V5CVE-2026-95601 Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions. EPSS 0.3%Vulnerability WBW Plugins CWE-89 #ghsa-99f5-94c9-vwcj	CVE Database V5	2026-09-23
Critical	9.3	EPSS 0.4%	CVE-2026-39494Product Filter by WBW (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-06-11CVE Database V5CVE-2026-39494 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Product Filter by WBW allows Blind SQL Injection. This issue affects Product Filter by WBW: from n/a through 3.1.2. EPSS 0.4%Vulnerability WBW Plugins CWE-89	CVE Database V5	2026-06-11
Medium	5.3	EPSS 0.2%	CVE-2026-32410WBW Currency Switcher for WooCommerce (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2026-03-13CVE Database V5CVE-2026-32410 Missing Authorization vulnerability in WBW Plugins WBW Currency Switcher for WooCommerce woo-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WBW Currency Switcher for WooCommerce: from n/a through <= 2.2.5. EPSS 0.2%Vulnerability WBW Plugins	CVE Database V5	2026-03-13
High	7.1	EPSS 0.4%	CVE-2025-31086Product Table by WBW (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2025-04-01CVE Database V5CVE-2025-31086 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WBW Plugins Product Table by WBW woo-product-tables allows Reflected XSS.This issue affects Product Table by WBW: from n/a through <= 2.1.4. EPSS 0.4%Vulnerability WBW Plugins	CVE Database V5	2025-04-01
High	7.6	EPSS 0.4%	CVE-2024-49691Product Filter by WBW (WordPress plugin) · SQL Injection High7.6EPSS 0.4%2024-10-24CVE Database V5CVE-2024-49691 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Product Filter by WBW woo-product-filter allows SQL Injection.This issue affects Product Filter by WBW: from n/a through <= 2.7.0. EPSS 0.4%Vulnerability WBW Plugins	CVE Database V5	2024-10-24

Page 1 of 1