CVE-2026-112866
CVE-2026-112866 · WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a through 3.4.6.
CVSS 9.3 · Critical · EPSS 0.4% · Public exploit · Fix available
- Published
- Updated
Affected products and versions
product filter by wbw
- Versions
- ≥ 0, ≤ 3.4.6: Affected; ≥ 3.4.7: Not affected (custom)
Update to 3.4.7