CVE Catalog
CVE-2026-95601
CriticalCVSS 9.3Summary
Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions.
Risk Assessment
An unauthenticated attacker can manipulate SQL queries, potentially leading to data leakage, modification, or deletion in the database.
Recommendation
Update the Product Filter by WBW plugin to the latest version that includes the fix.
Other vulnerabilities in Product Filter by WBW
Original NVD description (English source)
Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions.