CVE-2026-112866

CRITICAL Status: Received

CVSS Scores

CVSS v3.x Base Score
9.3
CRITICAL

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a through 3.4.6.

Published
October 24, 2026 8:16 AM
Last Modified
October 24, 2026 8:16 AM
Source
[email protected]

Weaknesses (CWE)

CWE-89

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry