Plugin icon

Brands for WooCommerce

brands-for-woocommerce

Vulnerabilities:

4

Last Updated:

May 26, 2026

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2025-12-26
Title
Brands for WooCommerce < 3.8.6.4 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 3.8.6.4
CVSS
6.5 (medium)
Published
2023-09-22
Title
Brands for WooCommerce < 3.8.2.3 - Missing Authorization to Unauthenticated Order Manipulation and Information Retrieval
Fixed in
Fixed in 3.8.2.3
CVSS
4.3 (medium)
Published
2023-09-22
Title
Brands for WooCommerce < 3.8.2.3 - Cross-Site Request Forgery
Fixed in
Fixed in 3.8.2.3
CVSS
4.3 (medium)
Published
2023-05-10
Title
Brands for WooCommerce < 3.8.2 - Contributor+ Stored XSS
Fixed in
Fixed in 3.8.2
CVSS
6.8 (medium)