Pricing
Case studies
Login
Start trial
HUSKY
RealMag777
Developer
1.4.3.2
Latest version
80,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
24 patched
11 Mitigation rules
WordPress HUSKY plugin < 1.4.1 - Products Filter Professional for WooCommerce < 1.4.1 - Shop Manager+ Local File Inclusion vulnerability
< 1.4.1
25/08/2026
WordPress HUSKY - Products Filter Professional for WooCommerce plugin < 1.4.1 - Shop Manager+ Local File Inclusion via meta_filter search_view vulnerability
< 1.4.1
19/08/2026
Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr' vulnerability
<= 1.3.7.3
18/12/2025
Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query' vulnerability
<= 1.3.7.2
03/12/2025
Unauthenticated SQL Injection via `phrase` Parameter vulnerability
<= 1.3.7.1
28/10/2025
Local File Inclusion Vulnerability
<= 1.3.7
19/06/2025
Local File Inclusion vulnerability
<= 1.3.6.4
14/03/2025
Unauthenticated Local File Inclusion vulnerability
<= 1.3.6.5
10/03/2025
Reflected Cross-Site Scripting via really_curr_tax Parameter vulnerability
<= 1.3.6.3
19/11/2024
Insecure Direct Object Reference to Unsubscribe vulnerability
<= 1.3.6.1
24/09/2024
Privilege Escalation vulnerability
<= 1.3.6.1
07/08/2024
Unauthenticated Time-Based SQL Injection vulnerability
<= 1.3.6
16/07/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
<= 1.3.5.3
29/05/2024
Remote Code Execution (RCE) vulnerability
<= 1.3.5.2
17/04/2024
Authenticated (Admin+) Local File Inclusion vulnerability
<= 1.3.5.2
01/04/2024
Cross Site Request Forgery (CSRF) vulnerability
<= 1.3.5.1
28/03/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
<= 1.3.5.1
14/03/2024
Authenticated (Contributor+) SQL Injection vulnerability
<= 1.3.5.2
14/03/2024
Cross Site Request Forgery (CSRF) vulnerability
<= 1.3.4.3
22/12/2023
SQL Injection vulnerability
<= 1.3.4.2
27/11/2023
Broken Access Control vulnerability
<= 1.3.4.2
23/11/2023
Admin+ PHP Object Injection vulnerability
< 1.3.2
11/01/2023
Arbitrary File Upload Vulnerability
<= 1.1.4.2
08/07/2017
Authenticated Persistent Cross-Site Scripting (XSS) Vulnerability
<= 1.1.4
08/07/2017