{"id":"CVE-2026-112866","published":"2026-10-24T08:16:51.303","lastModified":"2026-10-26T13:41:11.497","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a through 3.4.6.","cvssScore":9.3,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/woo-product-filter/vulnerability/wordpress-product-filter-by-wbw-plugin-3-4-6-sql-injection-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Blind SQL injection in the WPFactory Product Filter plugin (versions through 3.4.6) allows attackers to infer database contents by observing timing or response differences, due to unsanitized user input passed to SQL queries.","exploitability":"Exploitation is straightforward for remote attackers with network access and no authentication required, relying on time-based or error-based blind techniques.","blast_radius":"Successful exploitation could lead to full compromise of backend data confidentiality and limited availability via resource exhaustion, though integrity impact is minimal per CVSS.","remediation":"Upgrade to Product Filter by WBW version 3.4.7 or later, which contains the vendor's fix for this vulnerability.","detection":"Defenders may observe unusually long HTTP response times (e.g., >5 seconds) in requests to the plugin's filtering endpoints, especially when crafted payloads containing SQL time-delay functions (e.g., SLEEP(), BENCHMARK()) are submitted; however, no reliable log or network indicator is guaranteed due to the blind nature of the injection.","tags":["sql-injection","blind-sqli","web","plugin","wp"],"model":"garnet-coder","analyzedAt":"2026-10-25T08:49:25.398Z"}}