← back
CVE-2026-39494criticalobserved exploitationCWE-89

WordPress Product Filter by WBW plugin <= 3.1.2 - SQL Injection vulnerability

50Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Actcvss 9.3epss 0.4%
from disclosure to weapon
Published on NVDJun 11
VulnCheckJun 11
exploitation probability
0.4%top 68% of all CVEs
observed exploitation
yesVulnCheck
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Product Filter by WBW allows Blind SQL Injection. This issue affects Product Filter by WBW: from n/a through 3.1.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L