shouldiuse.io

Categories

VERDICT

Should I use HUSKY - Products Filter Professional for WooCommerce?

Not disclosed - products-filter.com

Depends. A legitimate, widely used WooCommerce filter plugin that fits stores with big catalogs needing faceted search. Avoid it if you can't apply urgent security patches — its 2025-2026 CVE record is genuinely bad.

Confidence

Medium. Based on 21 public sources; official pricing figures were not published on reviewed pages

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo usable evidence on support quality
  • Security posture

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
ProfessionalNot confirmed in reviewed sources

Best for

  • WooCommerce stores with large catalogs
  • Shops needing AJAX faceted filters
  • Owners comfortable patching plugins quickly

Not for

  • Non-WooCommerce platforms — use Shopify filter apps instead
  • Teams with no time for urgent security patches
  • Tiny catalogs — built-in WooCommerce widgets suffice
  • Security-sensitive stores on shared hosting

Gotchas - check before you buy

high

Repeated RCE and SQL injection CVEs since 2025; one flaw touched ~80,000 stores. Patch fast.

medium

Cheap '87% off' listings ($4.49-$10) are unofficial resellers; licenses likely invalid.

medium

Filtering big catalogs can slow WooCommerce; users hunt for 'FAST' alternatives.

low

Premium price not published on reviewed official pages; verify cost and license terms first.

Pros and cons

Pros

  • Free core version available
  • Frequently ranked among top WooCommerce filter plugins
  • Users report it working without problems
  • Publishes a public security page

Cons

  • Multiple serious CVEs since 2025, including RCE
  • One vulnerability reportedly hit ~80,000 stores
  • Users question filtering speed on large catalogs
  • IDOR flaw in v1.3.6.1 suggests patching gaps

Sources & method

Analyzed 10/05/2026 - 10 sources - Poor track record: multiple RCE, SQL injection, LFI, and IDOR vulnerabilities disclosed 2025-2026.

official x3review x3security x3news x1
  • CVE-2025-1661 — Remote Code Execution, RCE vulnerability in the HUSKY WooCommerce filter plugin, patched March 2025.
  • CVE-2026-92969 — Unauthenticated Local File Inclusion, Unauthenticated LFI leading to RCE, disclosed September 2026.
  • CVE-2025-11735 — Blind SQL Injection, Blind SQL injection in the HUSKY WooCommerce filter plugin.
  • CVE-2026-18562 — September 2026 flaw, Vulnerability affecting the plugin on ~80,000 stores per vendor tracking.
  • IDOR in v1.3.6.1, Insecure direct object reference allowing unsubscribe actions.

Key stats

  • Value for money: 4/5

    Rating

  • $0

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money: 4/5. Free core; premium sold one-time via CodeCanyon
  • Ease of use: 4/5. Users report 'works great, no problems'
  • Feature depth: 4/5. Ranked in top WooCommerce filter plugin roundups
  • Support quality. No usable evidence on support quality
  • Security posture: 1/5. Multiple RCE, SQLi, LFI, IDOR CVEs
  • ~80,000 Store reach stores affected by one reported flaw
  • Yes Free version free core download alongside premium
  • 5+ Public CVEs including RCE and SQL injection, 2025-2026

Pricing

Free

$0

  • Core product filters
  • WordPress.org download

Professional

Not confirmed in reviewed sources

  • Sold via CodeCanyon
  • Beware unofficial resellers at $4.49-$10

Security

Poor track record: multiple RCE, SQL injection, LFI, and IDOR vulnerabilities disclosed 2025-2026.

  • CVE-2025-1661 — Remote Code ExecutionRCE vulnerability in the HUSKY WooCommerce filter plugin, patched March 2025.⁶
  • CVE-2026-92969 — Unauthenticated Local File InclusionUnauthenticated LFI leading to RCE, disclosed September 2026.⁷
  • CVE-2025-11735 — Blind SQL InjectionBlind SQL injection in the HUSKY WooCommerce filter plugin.
  • CVE-2026-18562 — September 2026 flawVulnerability affecting the plugin on ~80,000 stores per vendor tracking.
  • IDOR in v1.3.6.1Insecure direct object reference allowing unsubscribe actions.

What users say

Users generally find it functional and reliable, but frequently question filtering speed and the plugin's recurring security flaws.

“Works great – No problems!”
WordPress.org support forum
“Is there a reliable and FAST plugin for product filtering?”
Reddit, r/woocommerce

Alternatives

Compare HUSKY - Products Filter Professional for WooCommerce with each alternative.

Full analysis

Based on 21 public sources; official pricing figures were not published on reviewed pages

Popular WooCommerce filter plugin, but 5+ CVEs since 2025 means fast patching is mandatory. Not for security-averse teams.

Methodology

Based on 21 public sources; official pricing figures were not published on reviewed pages

Sources

  1. HUSKY – Products Filter Professional for WooCommerce (CodeCanyon)codecanyon.net
    official
  2. Downloads — HUSKY Product Filterproducts-filter.com
    official
  3. Works great – No problems! (WordPress.org forum)wordpress.org
    review
  4. Is there a reliable and FAST plugin for product filtering? (Reddit)reddit.com
    review
  5. 9 Best Advanced AJAX Product Filter Plugins for WooCommercecrocoblock.com
    review
  6. CVE-2025-1661: WooCommerce HUSKY Filter RCEsentinelone.com
    security
  7. CVE-2026-92969 – Unauthenticated LFIionix.io
    security
  8. HUSKY flaw affecting 80,000 stores (LinkedIn)linkedin.com
    news
  9. WPScan plugin security profilewpscan.com
    security
  10. WOOF reseller listing at $4.49plugintheme.net
    official

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.