12 matches found
CVE-2025-68519
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Blind SQL Injection.This issue affects Brands for WooCommerce: from n/a through = 3.8.6.3...
EUVD-2023-27754
Malicious code in bioql PyPI...
EUVD-2023-48508
Malicious code in bioql PyPI...
CVE-2023-44149
Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brands for WooCommerce: from n/a through = 3.8.2.2...
CVE-2023-23667
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in BeRocket Brands for WooCommerce plugin = 3.7.0.6 versions...
CVE-2023-44149
Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brands for WooCommerce: from n/a through = 3.8.2.2...
PT-2024-13177 · Berocket · Berocket Brands For Woocommerce
Name of the Vulnerable Software and Affected Versions: BeRocket Brands for WooCommerce versions 3.8.2.2 and earlier Description: The issue affects the BeRocket Brands for WooCommerce plugin, allowing exploitation of incorrectly configured access control security levels due to a missing...
CVE-2023-23667
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in BeRocket Brands for WooCommerce plugin = 3.7.0.6 versions...
CVE-2023-23667
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in BeRocket Brands for WooCommerce plugin = 3.7.0.6 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in BeRocket Brands for WooCommerce plugin = 3.7.0.6 versions...
CVE-2023-23667
CVE-2023-23667 affects the Brands for WooCommerce WordPress plugin. The vulnerability is a stored XSS in BeRocket Brands for WooCommerce, exploitable by an authenticated user with the Contributor role or higher, via shortcode attributes output in pages/posts. Affected versions are
CVE-2023-23667 WordPress Brands for WooCommerce Plugin <= 3.7.0.6 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in BeRocket Brands for WooCommerce plugin = 3.7.0.6 versions...