CVE-2026-95601

Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions.

Published Sep 23, 2026
CVSS 9.3 critical
0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

WBW Plugins Product Filter by WBW

CVE-2026-95601 at the National Vulnerability Database