Cpe:2.3:a:wbw:product_filter_by_wbw:*:*:*:*:*:*:*:*

An unauthenticated blind SQL injection vulnerability (CVE-2026-112866) exists in the Product Filter by WBW WordPress plugin, allowing attackers to access database information via the plugin frontend.