What’s Vulnerable › Vulnerabilities

CVE-2022-23981: WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Set Featured Brand vulnerability

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-18 · updated 2026-06-17
• Weakness: CWE-284

Description

The vulnerability allows Subscriber+ level users to create brands in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4).

Affected products

• QuadLayers Perfect Brands for WooCommerce (WordPress plugin): through 2.0.4

References

• https://patchstack.com/database/vulnerability/perfect-woocommerce-brands/wordpress-perfect-brands-for-woocommerce-plugin-2-0-4-subscriber-set-featured-brand-vulnerability
• https://wordpress.org/plugins/perfect-woocommerce-brands/#developers
• https://patchstack.com/database/vulnerability/perfect-woocommerce-brands/wordpress-perfect-brands-for-woocommerce-plugin-2-0-4-subscriber-set-featured-brand-vulnerability
• https://wordpress.org/plugins/perfect-woocommerce-brands/#developers

Get alerted when CVE-2022-23981 or the next vulnerability affects your stack