What’s Vulnerable › Products

berocket Brands for WooCommerce vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your berocket Brands for WooCommerce version is affected

Latest berocket Brands for WooCommerce vulnerabilities

• CVE-2026-15648 — Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute (CVSS 6.4)
• CVE-2026-15647 — Brands for WooCommerce <= 3.8.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field (CVSS 4.4)
• CVE-2026-15646 — Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute (CVSS 6.4)
• CVE-2025-68519 — WordPress Brands for WooCommerce plugin <= 3.8.6.3 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2023-44149 — WordPress Brands for WooCommerce plugin <= 3.8.2.2 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2023-23667 — WordPress Brands for WooCommerce Plugin <= 3.7.0.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)