Woobewoo

10 CVEs across 6 Woobewoo products. Browse Woobewoo vulnerabilities, severities, and proof-of-concept exploits.

Woobewoo products with known CVEs

ProductCVEs
Product Filter For Woocommerce By Wbw5
Product Table3
Product Table For Woocommerce By Wbw2
Product Filter By Wbw1
Wbw Currency Switcher For Woocommerce1
Wbw Product Table Pro1
Woobewoo CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-3138Medium6.52026-03-24The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check in all versions up to…
CVE-2025-8416High7.52025-10-25The Product Filter by WBW plugin for WordPress is vulnerable to SQL Injection via the 'filtersDataBackend' parameter in all versions up to, and including, 2.9…
CVE-2025-11269Medium5.32025-10-25The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'approveNotice' acti…
CVE-2025-31059Critical9.32025-06-09Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in woobewoo WBW Product Table PRO woo-producttables-pro allo…
CVE-2025-2317High7.52025-04-04The Product Filter by WBW plugin for WordPress is vulnerable to time-based SQL Injection via the filtersDataBackend parameter in all versions up to, and includ…
CVE-2024-13234High7.52025-01-23The Product Table by WBW plugin for WordPress is vulnerable to SQL Injection via the 'additionalCondition' parameter in all versions up to, and including, 2.1…
CVE-2023-50877Medium4.32024-12-09Missing Authorization vulnerability in woobewoo Product Filter by WBW allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…
CVE-2021-4444High7.32024-10-16The Product Filter by WooBeWoo plugin for WordPress is vulnerable to authorization bypass in versions up to, and including 1.4.9 due to missing authorization c…
CVE-2024-43918Critical10.02024-08-29Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue…
CVE-2024-6365Critical9.82024-07-09The Product Table by WBW plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'saveCustomTitle' func…
CVE-2023-51512Medium4.32024-03-16Cross Site Request Forgery (CSRF) vulnerability in WBW Product Table by WBW.This issue affects Product Table by WBW: from n/a through 1.8.6.
CVE-2022-2575Medium4.82022-09-16The WBW Currency Switcher for WooCommerce WordPress plugin before 1.6.6 does not sanitise and escape some of its settings, which could allow high privilege use…