Input validation vulnerability in HUSKY – Products Filter Professional for WooCommerce 1.3.5.1

The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress has a security issue where hackers can insert harmful code into the plugin’s ‘woof’ shortcode. This can happen in versions 1.3.5.1 and below because the plugin does not properly clean and protect user input. This means that attackers who have contributor-level or higher access can insert their own code onto pages, which will run whenever someone accesses that page.