A critical SQL injection vulnerability exists in the Product Filter by WBW WordPress plugin, affecting versions from n/a through 3.4.6. This issue allows for blind SQL injection, posing a significant risk to affected systems. The vulnerability has a CVSS score of 9.3, indicating critical severity. Defenders and security teams should assess exposure, prioritize remediation, and implement monitoring to dete [truncated]
A high-severity Unauthenticated Cross Site Scripting (XSS) vulnerability was discovered in the Min Max Step Quantity Limits Manager for WooCommerce plugin, affecting versions up to 5.2.2. The vulnerability has a CVSS score of 7.1 and is considered HIGH severity.
A Cross-site Scripting (XSS) vulnerability exists in Wishlist for WooCommerce, a WordPress plugin developed by WPFactory. The vulnerability, classified as CWE-79, allows for Stored XSS attacks. This issue affects Wishlist for WooCommerce versions from n/a through 3.3.0. The vulnerability can lead to user session hijacking, sensitive information theft, and unauthorized actions. Defenders responsible for Wo [truncated]
