Vulnerabilities in woobewoo
10 resultsVexday analysis
Woobewoo apresenta um perfil de risco moderado com 9 CVEs catalogadas, sendo 2 críticas, porém nenhuma sob exploração ativa no momento. A ausência de publicações recentes (últimos 90 dias) sugere que o risco está estabilizado, mas a fraqueza dominante em controle de acesso (CWE-862) aponta para um padrão sistemático de falhas em autorização que merece revisão arquitetural.
CVE-2024-6365CRITICALProduct Table by WBW <= 2.0.1 - Unauthenticated Remote Code ExecutionEPSS 1.2%CVE-2023-50877MEDIUMWordPress Product Filter by WBW plugin <= 2.5.0 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-13234HIGHProduct Table by WBW <= 2.1.2 - Unuthenticated SQL InjectionEPSS 0.5%CVE-2025-2317HIGHProduct Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend ParameterEPSS 0.5%CVE-2025-31059CRITICALWordPress WBW Product Table PRO plugin <= 2.2.6 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-8416HIGHProduct Filter by WBW <= 2.9.7 - Unauthenticated SQL InjectionEPSS 0.4%CVE-2021-4444HIGHProduct Filter by WooBeWoo <= 1.4.9 - Missing AuthorizationEPSS 0.3%CVE-2026-3138MEDIUMProduct Filter for WooCommerce by WBW <= 3.1.2 - Missing Authorization to Unauthenticated Filter Data Deletion via TRUNCATE TABLEEPSS 0.3%CVE-2025-11269MEDIUMProduct Filter by WBW <= 3.0.0 - Missing Authorization to Unauthenticated Settings UpdateEPSS 0.3%CVE-2026-7804MEDIUMProduct Filter for WooCommerce by WBW <= 3.4.2 - Reflected Cross-Site Scripting via 'wpf_fid' ParameterEPSS 0.3%