https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 13:22:21 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-11396 <p>The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the &#39;filterSettings[default_query]&#39; parameter of the &#39;filtersFrontend&#39; AJAX action. The handler is registered as &#39;wp_ajax_nopriv_filtersFrontend&#39; and performs no capability or nonce check; raw POST data is JSON-decoded into $filterSettings and the attacker-controlled &#39;default_query&#39; array is unconditionally array_merge()&#39;d into the WP_Query arguments, overriding the plugin&#39;s safe defaults (most notably post_status, post_type, posts_per_page, and nopaging). This makes it possible for unauthenticated attackers to enumerate non-public WooCommerce products (draft, future, pending) — including their count and rendered listing markup — and to force unbounded queries that load all products in a single request.</p> <p>The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the &#39;filterSettings[default_query]&#39; parameter of the &#39;filtersFrontend&#39; AJAX action. The handler is registered as &#39;wp_ajax_nopriv_filtersFrontend&#39; and performs no capability or nonce check; raw POST data is JSON-decoded into $filterSettings and the attacker-controlled &#39;default_query&#39; array is unconditionally array_merge()&#39;d into the WP_Query arguments, overriding the plugin&#39;s safe defaults (most notably post_status, post_type, posts_per_page, and nopaging). This makes it possible for unauthenticated attackers to enumerate non-public WooCommerce products (draft, future, pending) — including their count and rendered listing markup — and to force unbounded queries that load all products in a single request.</p> https://db.gcve.eu/vuln/fkie_cve-2026-11396 https://db.gcve.eu/vuln/ghsa-xhg4-2xwf-g98x <p>The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the &#39;filterSettings[default_query]&#39; parameter of the &#39;filtersFrontend&#39; AJAX action. The handler is registered as &#39;wp_ajax_nopriv_filtersFrontend&#39; and performs no capability or nonce check; raw POST data is JSON-decoded into $filterSettings and the attacker-controlled &#39;default_query&#39; array is unconditionally array_merge()&#39;d into the WP_Query arguments, overriding the plugin&#39;s safe defaults (most notably post_status, post_type, posts_per_page, and nopaging). This makes it possible for unauthenticated attackers to enumerate non-public WooCommerce products (draft, future, pending) — including their count and rendered listing markup — and to force unbounded queries that load all products in a single request.</p> <p>The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disclosure in all versions up to, and including, 3.4.6 via the &#39;filterSettings[default_query]&#39; parameter of the &#39;filtersFrontend&#39; AJAX action. The handler is registered as &#39;wp_ajax_nopriv_filtersFrontend&#39; and performs no capability or nonce check; raw POST data is JSON-decoded into $filterSettings and the attacker-controlled &#39;default_query&#39; array is unconditionally array_merge()&#39;d into the WP_Query arguments, overriding the plugin&#39;s safe defaults (most notably post_status, post_type, posts_per_page, and nopaging). This makes it possible for unauthenticated attackers to enumerate non-public WooCommerce products (draft, future, pending) — including their count and rendered listing markup — and to force unbounded queries that load all products in a single request.</p> https://db.gcve.eu/vuln/ghsa-xhg4-2xwf-g98x