anonhaven

CVE-2026-3830

NONE EPSS 0.45%
Updated Apr 13, 2026
Unknown
Parameter Value
Affected Versions before 3.1.3
Type CWE-89 SQL Injection
Vendor Unknown
Public PoC No

The Product Filter for WooCommerce by WBW WordPress plugin before 3.1.3 does not sanitize and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks

Weakness Type (CWE)

CWE-89 SQL Injection

Vulnerable Products

unknown:product filter for woocommerce by wbw

References 1

https://wpscan.com/vulnerability/768014fd-0403-4182-b19e-3d46c92d8755/
contact@wpscan.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-97183

Unknown

4.3

CVE-2026-96227

Unknown

8.8

CVE-2026-94235

Unknown

4.3

CVE-2026-93550

Unknown

4.3

CVE-2026-91829

Unknown

7.1