Now officially on WordPress.org

CVE Database / CVE-2022-4489

CVE · High

CVE-2022-4489 — HUSKY – Products Filter for WooCommerce Professional [woocommerce-products-filter] < 1.3.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-4489 HUSKY – Products Filter for WooCommerce Professional [woocommerce-products-filter] < 1.3.2 Deserialization of Untrusted Data High 7.2 < 1.3.2 1.3.2 2023-01-11 —

CVE-2022-4489

The HUSKY – Products Filter for WooCommerce plugin (formerly WOOF) contained a PHP Object Injection vulnerability in versions before 1.3.2 that could be exploited by attackers to execute arbitrary code, inject SQL commands, traverse file paths, trigger denial of service attacks, and potentially gain complete control of an affected website. The flaw was discovered and reported by thinhnguyen1337 and has been resolved in version 1.3.2 and later.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings