stepasyuk vulnerabilities (CVE)

CVE records published for stepasyuk, newest first. Follow to get an email when a new one appears.

2 results

7.2High

CVE-2026-116390 18 days ago

WordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerability

stepasyuk Filter Everything — WordPress & WooCommerce Filters

Deserialization of Untrusted Data vulnerability in stepasyuk Filter Everything — WordPress & WooCommerce Filters filter-everything allows Object Injection.This issue affects Filter Everything — WordPress & WooCommerce Filters: from n/a throu…

6.1Medium

CVE-2026-87869 1 month ago

Filter Everything — WordPress & WooCommerce Filters <= 1.9.6 - Reflected Cross-Site Scripting via Elementor Posts Widget Pagination URL

stepasyuk Filter Everything — WordPress & WooCommerce Filters

The Filter Everything — WordPress & WooCommerce Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.9.6. This is due to insufficient input sanitization and output escaping in the flrt_elementor_load…