Now officially on WordPress.org

CVE Database / CVE-2018-8710

CVE · Critical

CVE-2018-8710 — HUSKY – Products Filter for WooCommerce Professional [woocommerce-products-filter] < 2.2.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2018-8711, CVE-2018-8710 HUSKY – Products Filter for WooCommerce Professional [woocommerce-products-filter] < 2.2.0 Improper Input Validation Critical 9.8 < 2.2.0 2.2.0 2018-03-06 —

CVE-2018-8711, CVE-2018-8710

The WOOF plugin for WooCommerce before version 2.2.0 contains a remote code execution vulnerability in its AJAX redraw function, which can be triggered by unauthenticated users through the woof_redraw_woof action. The vulnerable shortcode parameter processes WordPress shortcodes without proper authentication checks, allowing attackers to execute arbitrary shortcode markup that would normally be restricted to authenticated users.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings