Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The Product Filter for WooCommerce by WBW WordPress plugin before 3.1.3 does not sanitize and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-13 | 2 | Disclosure2 |
| 2026-04-27 | 1 | PoC1 |
https://atomicedge.io/cve-proof/cve-2026-3830-woo-product-filter-version-3-1-3-high-vulnerability-proof-of-concept CVE-2026-3830 woo-product-filter (CVSS Score 7.5) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atom…
Post summary
A proof‑of‑concept for the WooCommerce "Woo Product Filter" plugin vulnerability CVE‑2026‑3830 has been posted online, with a CVSS score of 7.5.
CVE-2026-3830 The Product Filter for WooCommerce by WBW WordPress plugin before 3.1.3 does not sanitize and escape a parameter before using it in a SQL statement, allowing unauthenti… https://www.cve.org/CVERecord?id=CVE-2026-3830
Post summary
The text announces a SQL injection vulnerability in the Product Filter for WooCommerce plugin, providing the flaw’s technical detail but no exploitation code, patch information, or evidence of active attacks.
CVE-2026-3830 SQL Injection Vulnerability in Product Filter for WooCommerce Plugin Before 3.1.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3830
Post summary
The text announces a newly documented SQL injection flaw in WooCommerce’s Product Filter component affecting versions before 3.1.3, providing basic vulnerability details but no PoC, exploit, or patch information.