Woobewoo vulnerabilities
We track 6 vulnerabilities in Woobewoo products across 6 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on October 25, 2025.
Latest Woobewoo vulnerabilities
- 7.5 High severity
Product Filter for WooCommerce by WBW: Improper Neutralization of Special Elements used in an SQL Command
The Product Filter by WBW plugin for WordPress is vulnerable to SQL Injection via the 'filtersDataBackend' parameter in all versions up to, and including, 2.9.7. This is due to insufficient escaping on the user supplied parameter and lack of sufficient prepara
- 9.3 Critical severity
WBW Product Table PRO: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in woobewoo WBW Product Table PRO woo-producttables-pro allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through <= 2.2.6.
- 7.5 High severity
Product Filter for WooCommerce by WBW: Improper Neutralization of Special Elements used in an SQL Command
The Product Filter by WBW plugin for WordPress is vulnerable to time-based SQL Injection via the filtersDataBackend parameter in all versions up to, and including, 2.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient prepara
- 9.8 Critical severity
Product Table for WooCommerce by WBW: Improper Neutralization of Special Elements used in an SQL Command
The Product Table by WBW plugin for WordPress is vulnerable to SQL Injection via the 'additionalCondition' parameter in all versions up to, and including, 2.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t
- 9.8 Critical severity
WBW Product Table PRO: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4.
- 9.8 Critical severity
Product Table for WooCommerce by WBW: Improper Control of Generation of Code
The Product Table by WBW plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.1 via the 'saveCustomTitle' function. This is due to missing authorization and lack of sanitization of appended data in the languages