Approved changes feed: RSS · Atom

cpe:2.3:a:woobewoo:product_filter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWoobewoo (0b879a1d-e77c-5146-bc64-232cd146e219)
ProductProduct Filter (7d8a129d-5534-561d-a187-4715bb5f23a9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4444 vulnerable 2026-06-08 05:38:09.457488 Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization
HIGH (7.3)
The Product Filter by WooBeWoo plugin for WordPress is vulnerable to authorization bypass in versions up to, and including 1.4.9 due to missing authorization checks on various functions. This makes it possible for unauthenticated attackers to perform unauthorized actions such as creating new filters and injecting malicious javascript into a vulnerable site. This was actively exploited at the time of discovery.
Published: 2024-10-16T06:43:26.711Z
Updated: 2026-04-08T16:44:55.393Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.