Unknown Husky vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Husky, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2022-4489pluginushusky_-_products_filter_professional_for_woocommerce+2
EPSS score
1.31%
The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.7.2CVE-2026-15244unknownhusky+1
EPSS score
1.15%
The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before concatenating it into a file inclusion path, allowing users with the shop manager capability to cause the inclusion and execution of arbitrary local files, which is then triggered on every front-end request including for unauthenticated visitors.