Security
فارسی
All products

woocommerce-products-filter

WordPress · Plugin
30 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HUSKY – Products Filter for WooCommerce Professional. MCP is onboard <= 1.4.6 - Missing AuthorizationCVE-2026-116401 woocommerce-products-filter WordPress Medium Fix reported
HUSKY – Products Filter for WooCommerce Professional. MCP is onboard <= 1.4.6 - Unauthenticated Information ExposureCVE-2026-115947 woocommerce-products-filter WordPress Medium Fix reported
HUSKY <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized ScriptCVE-2026-107646 woocommerce-products-filter WordPress Medium Fix reported
HUSKY – Products Filter for WooCommerce Professional <= 1.4.3.2 - Reflected Cross-Site ScriptingCVE-2026-95608 woocommerce-products-filter WordPress Medium Fix reported
HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAXCVE-2026-92969 woocommerce-products-filter WordPress High Fix reported
HUSKY <= 1.4.3 - Reflected Cross-Site ScriptingCVE-2026-18562 woocommerce-products-filter WordPress Medium Fix reported
HUSKY - Products Filter Professional for WooCommerce <= 1.4.0 - Authenticated (Shop manager+) Local File InclusionCVE-2026-15244 woocommerce-products-filter WordPress Medium Fix reported
HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'CVE-2025-13110 woocommerce-products-filter WordPress Medium Fix reported
HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query'CVE-2025-13109 woocommerce-products-filter WordPress Medium Fix reported
HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` ParameterCVE-2025-11735 woocommerce-products-filter WordPress High Fix reported
HUSKY <= 1.3.7 - Authenticated (Contributor+) Local File InclusionCVE-2025-52708 woocommerce-products-filter WordPress High Fix reported
HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax ParameterCVE-2024-11400 woocommerce-products-filter WordPress Medium Fix reported
HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.4 - Unauthenticated Local File InclusionCVE-2025-26890 woocommerce-products-filter WordPress High Fix reported
HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File InclusionCVE-2025-1661 woocommerce-products-filter WordPress Critical Fix reported
HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.1 - Insecure Direct Object Reference to UnsubscribeCVE-2024-7491 woocommerce-products-filter WordPress Medium Fix reported
HUSKY <= 1.3.6.1 - Authenticated (Shop Manager+) Arbitrary Options UpdateCVE-2024-43121 woocommerce-products-filter WordPress High Fix reported
HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL InjectionCVE-2024-6457 woocommerce-products-filter WordPress Critical Fix reported
HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-5039 woocommerce-products-filter WordPress Medium Fix reported
HUSKY – Products Filter for WooCommerce (formerly WOOF) <= 1.3.5.2 - Authenticated (Subscriber+) Remote Code ExecutionCVE-2024-32680 woocommerce-products-filter WordPress Critical Fix reported
HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File InclusionCVE-2024-3061 woocommerce-products-filter WordPress High Fix reported