Is HUSKY safe?

Every recorded flaw

• Oct 16, 2026HUSKY – Products Filter for WooCommerce Professional: Sensitive Information ExposureCVE-2026-107646 · affects up to 1.4.5 · reported by WordfenceMedium 5.3
• Oct 9, 2026HUSKY: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2026-95608 · affects up to 1.4.3.2 · reported by PatchstackHigh 7.1
• Sep 22, 2026HUSKY – Products Filter for WooCommerce Professional: Local File InclusionCVE-2026-92969 · affects up to 1.4.4 · reported by WordfenceHigh 8.1
• Sep 11, 2026HUSKY – Products Filter Professional for WooCommerce: Reflected Cross-Site ScriptingCVE-2026-18562 · affects up to 1.4.3 · reported by WordfenceMedium 6.1
• Aug 1, 2026HUSKY: Does not sanitize a stored setting value against directory traversal before concatenating it into a file inclusion pathCVE-2026-15244 · fixed in 1.4.1 · reported by WPScan1.1% oddsHigh 7.2
• May 13, 2026WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scriCVE-2020-37174 · reported by VulnCheckMedium 4.8
• Dec 18, 2025HUSKY – Products Filter Professional for WooCommerce: Insecure Direct Object ReferenceCVE-2025-13110 · affects up to 1.3.7.3 · reported by WordfenceMedium 4.3
• Dec 3, 2025HUSKY – Products Filter Professional for WooCommerce: Insecure Direct Object ReferenceCVE-2025-13109 · affects up to 1.3.7.2 · reported by WordfenceMedium 4.3
• Oct 28, 2025HUSKY – Products Filter Professional for WooCommerce: Blind SQL InjectionCVE-2025-11735 · affects up to 1.3.7.1 · reported by WordfenceHigh 7.5
• Jun 20, 2025HUSKY: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')CVE-2025-52708 · affects up to 1.3.7 · reported by PatchstackHigh 7.5
• Mar 27, 2025HUSKY: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')CVE-2025-26890 · affects up to 1.3.6.4 · reported by PatchstackHigh 7.5
• Mar 11, 2025HUSKY – Products Filter Professional for WooCommerce: Local File InclusionCVE-2025-1661 · affects up to 1.3.6.5 · reported by Wordfence56% oddsCritical 9.8
• Dec 13, 2024HUSKY: Missing AuthorizationCVE-2023-40334 · affects up to 1.3.4.2 · reported by PatchstackMedium 4.3
• Nov 19, 2024HUSKY – Products Filter Professional for WooCommerce: Reflected Cross-Site ScriptingCVE-2024-11400 · affects up to 1.3.6.3 · reported by WordfenceMedium 6.1
• Sep 24, 2024HUSKY – Products Filter Professional for WooCommerce: Insecure Direct Object ReferenceCVE-2024-7491 · affects up to 1.3.6.1 · reported by WordfenceMedium 5.3
• Aug 13, 2024HUSKY: Improper Privilege ManagementCVE-2024-43121 · affects up to 1.3.6.1 · reported by PatchstackCritical 9.1
• Jul 16, 2024HUSKY – Products Filter Professional for WooCommerce: Time-based SQL InjectionCVE-2024-6457 · affects up to 1.3.6 · reported by Wordfence20% oddsCritical 9.8
• May 29, 2024HUSKY – Products Filter Professional for WooCommerce: Stored Cross-Site ScriptingCVE-2024-5039 · affects up to 1.3.5.3 · reported by WordfenceMedium 6.4
• May 17, 2024HUSKY – Products Filter for WooCommerce (formerly WOOF): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Control of Generation of Code ('Code Injection')CVE-2024-32680 · affects up to 1.3.5.2 · reported by PatchstackHigh 8.8
• Mar 29, 2024HUSKY – Products Filter for WooCommerce (formerly WOOF): Cross-Site Request Forgery (CSRF)CVE-2024-30462 · affects up to 1.3.5.1 · reported by PatchstackMedium 4.3
• Mar 29, 2024HUSKY – Products Filter Professional for WooCommerce: Local File InclusionCVE-2024-3061 · affects up to 1.3.5.2 · reported by WordfenceHigh 7.2
• Mar 15, 2024HUSKY – Products Filter for WooCommerce (formerly WOOF): Cross-Site Request Forgery (CSRF)CVE-2023-50861 · affects up to 1.3.4.3 · reported by PatchstackMedium 4.3
• Mar 15, 2024HUSKY – Products Filter for WooCommerce Professional: Stored Cross-Site ScriptingCVE-2024-1796 · affects up to 1.3.5.1 · reported by WordfenceMedium 6.4
• Mar 15, 2024HUSKY – Products Filter for WooCommerce Professional: SQL InjectionCVE-2024-1795 · affects up to 1.3.5.2 · reported by WordfenceHigh 8.8
• Dec 20, 2023HUSKY – Products Filter for WooCommerce Professional: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2023-40010 · affects up to 1.3.4.2 · reported by PatchstackCritical 9.3
• Feb 6, 2023HUSKY: Unserializes user input provided via the settingsCVE-2022-4489 · fixed in 1.3.2 · reported by WPScan1.3% oddsHigh 7.2
• Mar 14, 2018A local file inclusion issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrated by the shortcode paCVE-2018-8711 · fixed in 2.2.0 · reported by MITRE1.9% oddsCritical 9.8
• Mar 14, 2018A remote code execution issue was discovered in the WooCommerce Products Filter (aka WOOF) plugin before 2.2.0 for WordPress, as demonstrated by the shortcode pCVE-2018-8710 · fixed in 2.2.0 · reported by MITRE4.2% oddsCritical 9.8

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.