CVE-2026-112866
WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Product Filter by WBW plugin for WordPress, which is used to add product filtering to WooCommerce stores, is affected by this vulnerability. An attacker could exploit it to inject database commands through blind SQL injection, potentially allowing them to read or manipulate data stored in the site's database.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a through 3.4.6.
Affected versions
- woo-product-filter
through 3.4.6