CRITICAL 9.3 CVE-2026-112866 Published 24 Oct 2026

WPFactory Product Filter by WBW SQL Injection Vulnerability

Worried this affects your website?

Get Emergency Help help@myserverhacked.com

WPFactory Product Filter by WBW is affected by an SQL Injection vulnerability. The plugin fails to properly neutralize special elements in an SQL command, allowing Blind SQL Injection.

Affected versions: from n/a through 3.4.6.

Reference: CVE-2026-112866 on NVD

← Back to Security News