PT-2026-32280

CVE-2026-3830

Published

2026-03-23

Updated

2026-04-27

Description by

CVSS 3.1

8.6

High

MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Product Filter for WooCommerce by WBW WordPress plugin versions prior to 3.1.3

Description An issue exists where a parameter is not sanitized or escaped before being used in a SQL statement. This allows unauthenticated users to perform SQL injection attacks, which involve inserting malicious SQL code into a query to manipulate the database.

Recommendations Update the plugin to version 3.1.3 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Mcdruid

Vendors

Affected products

Weakness enumeration

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Related identifiers