CVE-2025-11269

20th percentile - higher than 20% of all known CVEs

The Product Filter by WBW plugin for WordPress (all versions up to and including 3.0.0) is vulnerable to unauthorized data modification due to a missing capability check on the 'approveNotice' action. An unauthenticated attacker can update the plugin's settings.

An attacker can modify the plugin's configuration without authentication, potentially altering product filtering behavior or causing other unwanted effects on the site.

Update the Product Filter by WBW plugin to a version newer than 3.0.0 as soon as it becomes available. Until then, consider restricting access to the admin panel or disabling the plugin.