Themify – WooCommerce Product Filter

Themify – WooCommerce Product Filter has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 7 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2024 was the busiest year with 5 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (71%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection.

Every one of the 7 issues recorded for Themify – WooCommerce Product Filter has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, most of them (3) reported by Erwan LR. Themify – WooCommerce Product Filter is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.0.

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage100%
Open

0

Fixed

7

Get automatic notifications for all Themify – WooCommerce Product Filter vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2024-6027

Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter

Read the full analysis

Vulnerability Records

7 records
Themify – WooCommerce Product Filter banner
Latestv1.5.7

Themify – WooCommerce Product Filter

themifyme

Author

themifyme

3.5(72)
70/100
Last Updated
2026-09-05 (7d ago)
Active Installs
20,000+
Downloads
826,492
Requires WP
5.0+
Requires PHP
7.2+
Tested up to
WP 7.1.0
Created
2016-11-04 (10y ago)
Requires Plugins
woocommerce

Shopping online can be very time consuming, especially if you have to shift through hundreds of products. With the Product Filter, you can help shoppers easily find products on your WooCommerce shop. This free WordPress plugin allow users to easily filter through products by price range, categories, attributes, tags, and much more. As users select a filter they’ll be able to see live search results where products will instantly be displayed on the page. In addition to this, we’ve added the ability to create filter combinations! Unlike many other product filters, where you can only select one filter at a time, Product Filter allows multiple selections which help shoppers to refine the product search results. Keeping you in mind, this powerful plugin comes with a simple easy-to-use drag and drop form Builder, making it easy for you to create an unlimited number of search forms. The Product Filter plugin is a must-have tool for any ecommerce site! Plugin documentation is available at: https://themify.me/docs/wc-product-filter-documentation Features: Live search results Drag and drop form builder Multiple filter combinations Vertical or horizontal layout Works with Divi, Elementor and Themify Builder product module

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C