WordPress plugin
HUSKY – Products Filter for WooCommerce Professional. MCP is onboard security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 30 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical6
- High8
- Medium16
- Low0
All HUSKY – Products Filter for WooCommerce Professional. MCP is onboard vulnerabilities
- Medium5.3Unauthenticated Information Exposure
≤1.4.6Update to 1.4.7
- Medium5.3Missing Authorization
≤1.4.6Update to 1.4.7
- Medium5.3Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script
≤1.4.5Update to 1.4.6
- Medium6.1Reflected Cross-Site Scripting
≤1.4.3.2Update to 1.4.4
- High8.1Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAX
≤1.4.4Update to 1.4.5
- Medium6.1Reflected Cross-Site Scripting
≤1.4.3Update to 1.4.3.1
- Medium6.6Products Filter Professional for WooCommerce <= 1.4.0 - Authenticated (Shop manager+) Local File Inclusion
≤1.4.0Update to 1.4.1
- Medium4.3Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'
≤1.3.7.3Update to 1.3.7.4
- Medium4.3Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query'
≤1.3.7.2Update to 1.3.7.3
- High7.5Unauthenticated SQL Injection via `phrase` Parameter
≤1.3.7.1Update to 1.3.7.2
- High8.8Authenticated (Contributor+) Local File Inclusion
≤1.3.7Update to 1.3.7.1
- High7.5Unauthenticated Local File Inclusion
≤1.3.6.4Update to 1.3.6.5
- Critical9.8Unauthenticated Local File Inclusion
≤1.3.6.5Update to 1.3.6.6
- Medium6.1Reflected Cross-Site Scripting via really_curr_tax Parameter
≤1.3.6.3Update to 1.3.6.4
- Medium5.3Insecure Direct Object Reference to Unsubscribe
≤1.3.6.1Update to 1.3.6.2
- High7.2Authenticated (Shop Manager+) Arbitrary Options Update
≤1.3.6.1Update to 1.3.6.2
- Critical9.8Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection
≤1.3.6Update to 1.3.6.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤1.3.5.3Update to 1.3.6
- Critical9.9Authenticated (Subscriber+) Remote Code Execution
≤1.3.5.2Update to 1.3.5.3
- Medium4.3Cross-Site Request Forgery
≤1.3.5.1Update to 1.3.5.2
- High7.2Authenticated (Admin+) Local File Inclusion
≤1.3.5.2Update to 1.3.5.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤1.3.5.1Update to 1.3.5.2
- High8.8Authenticated (Contributor+) SQL Injection
≤1.3.5.2Update to 1.3.5.3
- Medium4.3Cross-Site Request Forgery
≤1.3.4.3Update to 1.3.4.4
- Critical9.8Unauthenticated SQL Injection via search terms
≤1.3.4.2Update to 1.3.4.3
- Medium4.3Missing Authorization via woof_meta_get_keys()
≤1.3.4.2Update to 1.3.4.3
- High7.2Authenticated (Admin+) PHP Object Injection
≤1.3.1Update to 1.3.2
- Medium6.1Products Filter for WooCommerce <= 1.2.6.2 - Reflected Cross-Site Scripting
<1.2.6.3Update to 1.2.6.3
- Critical9.8Products Filter for WooCommerce <= 1.1.9 - Remote Code Execution
<1.2.0Update to 1.2.0
- Critical9.8Products Filter for WooCommerce <= 1.1.9 - Local File Inclusion
<1.2.0Update to 1.2.0
HUSKY – Products Filter for WooCommerce Professional. MCP is onboard: common questions
Does HUSKY – Products Filter for WooCommerce Professional. MCP is onboard have known vulnerabilities?
Yes. VulnCrest Radar lists 30 known vulnerabilities in HUSKY – Products Filter for WooCommerce Professional. MCP is onboard: 6 critical, 8 high, 16 medium. None are known to affect version null.
How do I check which version of HUSKY – Products Filter for WooCommerce Professional. MCP is onboard I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent HUSKY – Products Filter for WooCommerce Professional. MCP is onboard vulnerability?
CVE-2026-115947, published Oct 30, 2026: HUSKY – Products Filter for WooCommerce Professional. MCP is onboard <= 1.4.6 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).
Is any HUSKY – Products Filter for WooCommerce Professional. MCP is onboard vulnerability listed in CISA KEV?
No. None of the known HUSKY – Products Filter for WooCommerce Professional. MCP is onboard vulnerabilities is currently listed in the CISA KEV catalog.