HP
Product
HUSKY – Products Filter Professional for WooCommerce
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 6Low 0
Watch
Add HUSKY – Products Filter Professional for WooCommerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-1661 | 9.8 | Mar 11 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion Affected: through 1.3.6.5 |
| CVE-2024-1795 | 8.8 | Mar 15 | HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection Affected: through 1.3.5.2 |
| CVE-2025-11735 | 7.5 | Oct 28 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter Affected: through 1.3.7.1 |
| CVE-2024-6457 | 7.5 | Jul 16 | HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection Affected: through 1.3.6 |
| CVE-2024-3061 | 7.2 | Mar 29 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion Affected: through 1.3.5.2 |
| CVE-2024-5039 | 6.4 | May 29 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 1.3.5.3 |
| CVE-2024-11400 | 6.1 | Nov 19 | HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameter Affected: through 1.3.6.3 |
| CVE-2024-1796 | 5.4 | Mar 15 | HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 1.3.5.1 |
| CVE-2025-13110 | 4.3 | Dec 18 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr' Affected: through 1.3.7.3 |
| CVE-2025-13109 | 4.3 | Dec 3 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query' Affected: through 1.3.7.2 |
| CVE-2024-7491 | 4.3 | Sep 25 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.1 - Insecure Direct Object Reference to Unsubscribe Affected: through 1.3.6.1 |
Showing 11