CVE-2026-95601

An unauthenticated SQL injection vulnerability exists in the Product Filter by WBW versions up to 3.1.7, allowing attackers to execute arbitrary SQL queries on the database. This critical flaw can lead to data exposure, manipulation, or complete system compromise. Organizations using affected versions should prioritize immediate remediation to mitigate potential data breaches and unauthorized access.