WBW vulnerabilities

Products

• WooBeWoo Product Filter Pro 2
• Product Table by WBW 1
• WBW Product Table PRO 1

Latest WBW CVEs

Newest publication first

1. CVE-2026-32554 WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 - SQL Injection vulnerability

   Published 2026-08-24

   Critical·CVSS 9.3 EPSS 0.40%

   Unauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.

2. CVE-2025-39496 WordPress WooBeWoo Product Filter Pro plugin < 2.9.6 - SQL Injection vulnerability

   Published 2025-08-28

   Critical·CVSS 9.3 EPSS 0.30%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter Pro allows SQL Injection.This issue affects WooBeWoo Product Filter Pro: from n/a before 2.9.6.

3. CVE-2024-43918 WordPress WBW Product Table PRO plugin <= 1.9.4 - Unauthenticated Arbitrary SQL Query Execution vulnerability

   Published 2024-08-29

   Critical·CVSS 9.8 EPSS 1.5%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4.

4. CVE-2023-51512 WordPress Product Table by WBW plugin <= 1.8.6 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2024-03-16

   High·CVSS 8.8 EPSS 0.23%

   Cross Site Request Forgery (CSRF) vulnerability in WBW Product Table by WBW.This issue affects Product Table by WBW: from n/a through 1.8.6.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.