PT-2025-43705
CVE-2025-11269
·
Published
2025-10-24
·
Updated
2025-10-25
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Product Filter by WBW versions up to and including 3.0.0
Description
The Product Filter by WBW plugin for WordPress has a flaw where data can be modified without authorization. This is due to a missing capability check on the 'approveNotice' action. Unauthenticated attackers can potentially update the plugin’s settings.
Recommendations
Update the Product Filter by WBW plugin to a version later than 3.0.0.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾