Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Brands for WooCommerce — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Brands for WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: BeRocket

CVE IDTitleCVSSSeverityPublished
CVE-2026-15648 Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute CWE-79 6.4 Medium2026-07-24
CVE-2026-15646 Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute CWE-79 6.4 Medium2026-07-23
CVE-2026-15647 Brands for WooCommerce <= 3.8.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field CWE-79 4.4 Medium2026-07-23
CVE-2025-68519 WordPress Brands for WooCommerce plugin <= 3.8.6.3 - SQL Injection vulnerability CWE-89 8.5 High2025-12-24
CVE-2023-44149 WordPress Brands for WooCommerce plugin <= 3.8.2.2 - Broken Access Control vulnerability CWE-862 5.3 Medium2024-12-13
CVE-2023-23667 WordPress Brands for WooCommerce Plugin <= 3.7.0.6 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium2023-05-18

All 6 known CVE vulnerabilities affecting Brands for WooCommerce with full Chinese analysis, references, and POCs where available.