CVEsRealMag777CVE-2026-115947Published Oct 30, 18:30 · Updated Oct 30, 18:50 UTC
6.5
MediumCVSS 3.1 · from Patchstack
CVE-2026-115947

WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerability

woocommerce-products-filter · CWE-201 · CWE-201
Affectedwoocommerce-products-filter
FixUpdate to 1.4.7 or newer
PublishedOct 30, 18:30 · Patchstack
ScoredOct 30 · 6.5 · Patchstack
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:08 UTC

What we know

No known exploitation. CISA KEV, checked 22:08 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker only needs network access to the target. No login needed. CVSS: network, no privileges.

Description

Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions.

From Patchstack

Affected and fixed versions

ProductAffectedFixed inwoocommerce-products-filterfrom n/a1.4.7

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

patchstack.com/database/wordpress/plugin/woocommerce-products-filter/vulnerability/wordpress-husky-plugin-1-4-6-sensitive-data-exposure-vulnerability?_s_id=cve · patchstack.comvdb entry

Other CVEs in woocommerce-products-filter

All 8 →
7.5WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerability · CVE-2026-116401Oct 307.5WordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability · CVE-2025-52708Jun 20, 20257.5WordPress HUSKY plugin <= 1.3.6.4 - Local File Inclusion vulnerability · CVE-2025-26890Mar 27, 2025