Security Advisory

CVE-2026-3830

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-13 06:00:13
Last updated 2026-04-13 12:56:39
Assigner WPScan
State PUBLISHED

Description

The Product Filter for WooCommerce by WBW WordPress plugin before 3.1.3 does not sanitize and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks