Woocommerce Products Filter
Approved changes feed: RSS · Atom
cpe:2.3:a:woocommerce-filter:woocommerce_products_filter:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Woocommerce Filter (5bc5e47d-a439-5916-8817-46e86e7ed0fc) |
|---|---|
| Product | Woocommerce Products Filter (d69c8c9e-9a10-5b70-b6d8-da1b2f976fab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-8711 |
vulnerable | 2026-06-08 05:12:06.342175 |
Details available
A local file inclusion issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrated by the shortcode parameter in a woof_redraw_woof action. The vulnerability is due to the lack of args/input validation on render_html before allowing it to be called by extract(), a PHP built-in function. Because of this, the supplied args/input can be used to overwrite the $pagepath variable, which then could lead to a local file inclusion attack.
Published: 2018-03-14T19:00:00.000Z
Updated: 2024-09-17T02:06:59.686Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8710 |
vulnerable | 2026-06-08 05:12:06.341646 |
Details available
A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrated by the shortcode parameter in a woof_redraw_woof action. The plugin implemented a page redraw AJAX function accessible to anyone without any authentication. WordPress shortcode markup in the "shortcode" parameters would be evaluated. Normally unauthenticated users can't evaluate shortcodes as they are often sensitive.
Published: 2018-03-14T19:00:00.000Z
Updated: 2024-09-16T16:27:32.479Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.