https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1661.htmlhttps://patchthecve.com/cve/CVE-2025-1661.htmlWed, 17 Jun 2026 08:39:33 +0000CRITICAL 9.8: The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the woof_text_search AJAX action. This makes it possible for unauthenticated attackers to include and exechttps://patchthecve.com/cve/CVE-2023-40334.htmlhttps://patchthecve.com/cve/CVE-2023-40334.htmlWed, 17 Jun 2026 06:17:16 +0000MEDIUM 4.3: Missing Authorization vulnerability in RealMag777 HUSKY woocommerce-products-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HUSKY: from n/a through <= 1.3.4.2.https://patchthecve.com/cve/CVE-2024-7491.htmlhttps://patchthecve.com/cve/CVE-2024-7491.htmlWed, 17 Jun 2026 08:20:18 +0000MEDIUM 5.3: The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.6.1 via the woof_messenger_remove_subscr AJAX action due to missing validation on the 'key' user controlled key. This makes it poshttps://patchthecve.com/cve/CVE-2024-43121.htmlhttps://patchthecve.com/cve/CVE-2024-43121.htmlWed, 17 Jun 2026 07:50:28 +0000CRITICAL 9.1: Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1.https://patchthecve.com/cve/CVE-2024-6457.htmlhttps://patchthecve.com/cve/CVE-2024-6457.htmlWed, 17 Jun 2026 08:18:03 +0000CRITICAL 9.8: The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the ‘woof_author’ parameter in all versions up to, and including, 1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the ex