Brands For Woocommerce
Approved changes feed: RSS · Atom
cpe:2.3:a:berocket:brands_for_woocommerce:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Berocket (a1f83755-2442-53be-b4e7-2b2f01f86270) |
|---|---|
| Product | Brands For Woocommerce (202d7f4f-b0a5-51c6-84e3-82af55ea6a35) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-15648 |
vulnerable | 2026-07-29 00:26:18.332781 |
Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute
MEDIUM (6.4)
The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'width' Shortcode Attribute in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2026-07-24T06:52:00.092Z
Updated: 2026-07-24T22:10:51.283Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15647 |
vulnerable | 2026-07-29 00:26:18.332567 |
Brands for WooCommerce <= 3.8.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field
MEDIUM (4.4)
The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Because the payload is stored in term meta rather than post content, the WordPress unfiltered_html capability exception does not apply, meaning Shop Manager-level users — who normally lack unfiltered_html — can fully exploit this vulnerability.
Published: 2026-07-23T08:34:40.072Z
Updated: 2026-07-23T16:04:37.162Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15646 |
vulnerable | 2026-07-29 00:26:18.332295 |
Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute
MEDIUM (6.4)
The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2026-07-23T08:34:40.434Z
Updated: 2026-07-23T14:54:38.888Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68519 |
vulnerable | 2026-06-08 07:41:21.336257 |
WordPress Brands for WooCommerce plugin <= 3.8.6.3 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Blind SQL Injection.This issue affects Brands for WooCommerce: from n/a through <= 3.8.6.3.
Published: 2025-12-24T12:31:22.910Z
Updated: 2026-04-28T16:14:29.187Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44149 |
vulnerable | 2026-06-08 06:12:38.428643 |
WordPress Brands for WooCommerce plugin <= 3.8.2.2 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brands for WooCommerce: from n/a through <= 3.8.2.2.
Published: 2024-12-13T14:24:27.160Z
Updated: 2026-04-29T09:51:50.108Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23667 |
vulnerable | 2026-06-08 05:56:04.164385 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.