CVE-2026-40725 — Vulnerability intelligence

Barn2 Media Ltd — WooCommerce Product Filters

Published: 2026-06-17T09:50:59.691Z

CVSS

9.8

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.

Sources

• CVE-2026-40725
• Original advisory
• CVE-2026-40725