CVE-2023-44149

Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brands for WooCommerce: from n/a through = 3.8.2.2...

PT-2024-13177 · Berocket · Berocket Brands For Woocommerce

Name of the Vulnerable Software and Affected Versions: BeRocket Brands for WooCommerce versions 3.8.2.2 and earlier Description: The issue affects the BeRocket Brands for WooCommerce plugin, allowing exploitation of incorrectly configured access control security levels due to a missing...

CVE-2023-44149: Missing Authorization

Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brands for WooCommerce: from n/a through = 3.8.2.2...

CVE-2023-23667

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in BeRocket Brands for WooCommerce plugin = 3.7.0.6 versions...

CVE-2023-23667

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in BeRocket Brands for WooCommerce plugin = 3.7.0.6 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in BeRocket Brands for WooCommerce plugin = 3.7.0.6 versions...

CVE-2023-23667

CVE-2023-23667 affects the Brands for WooCommerce WordPress plugin. The vulnerability is a stored XSS in BeRocket Brands for WooCommerce, exploitable by an authenticated user with the Contributor role or higher, via shortcode attributes output in pages/posts. Affected versions are

CVE-2023-23667 WordPress Brands for WooCommerce Plugin <= 3.7.0.6 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in BeRocket Brands for WooCommerce plugin = 3.7.0.6 versions...

CVE-2023-23667

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in BeRocket Brands for WooCommerce plugin = 3.7.0.6 versions...

PT-2023-19111

Name of the Vulnerable Software and Affected Versions BeRocket Brands for WooCommerce plugin versions 3.7.0.6 and earlier Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or higher-privileged users. There is n...

CVE-2023-23667: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in BeRocket Brands for WooCommerce plugin = 3.7.0.6 versions...

VulnCheck KEV: CVE-2022-45813

BeRocket Plugins for WordPress is vulnerable to an authorization bypass in the closenotice, subscribe, disableratenotice, featurerequestsend, getpluginerrorajax, closenotice, and testkey functions which can allow user level subscribers to invoke these admin level functions...

CVE-2022-0399

The Advanced Product Labels for WooCommerce WordPress plugin before 1.2.3.7 does not sanitise and escape the taxcolorsettype parameter before outputting it back in the berocketaplcolorlistener AJAX action's response, leading to a Reflected Cross-Site Scripting...

PT-2022-13155

Name of the Vulnerable Software and Affected Versions Advanced Product Labels for WooCommerce WordPress plugin versions prior to 1.2.3.7 Description The issue arises from the lack of sanitization and escaping of the tax color set type parameter in the berocket apl color listener AJAX action's...