Vendor
The HUSKY Products Filter for WooCommerce Professional plugin (<= 1.4.4) is vulnerable to unauthenticated Local File Inclusion (LFI) due to inadequate nonce protection, allowing remote code execution via arbitrary PHP file inclusion.