Ghostwire

CVE-2026-39494: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins...

CRITICAL CVSS 9.5

Published: June 11, 2026 | Last Modified: June 11, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Product Filter by WBW allows Blind SQL Injection. This issue affects Product Filter by WBW: from n/a through 3.1.2.

Ghostwire Analysis — What This Means Practically

Critical CVSS score indicates maximum severity — remote code execution, authentication bypass, or complete system compromise is likely possible.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References

www.tenable.com/cve/CVE-2026-39494
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-39494