Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/11/25 10:47 p.m.3 views

CVE-2025-10144

The Perfect Brands for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the brands attribute of the products shortcode in all versions up to, and including, 3.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS6.6AI score0.00028EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/25 12:31 a.m.0 views

EUVD-2025-199099

The Perfect Brands for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the brands attribute of the products shortcode in all versions up to, and including, 3.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS6.1AI score0.00028EPSS
Exploits0References3
NVD
NVD
added 2025/11/24 11:15 p.m.3 views

CVE-2025-10144

The Perfect Brands for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the brands attribute of the products shortcode in all versions up to, and including, 3.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS0.00028EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/24 10:28 p.m.2 views

CVE-2025-10144 Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection

The Perfect Brands for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the brands attribute of the products shortcode in all versions up to, and including, 3.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS6.2AI score0.00028EPSS
Exploits0References2
CVE
CVE
added 2025/11/24 10:28 p.m.9 views

CVE-2025-10144

CVE-2025-10144 concerns the Perfect Brands for WooCommerce plugin for WordPress. Wordfence reports a time-based SQL Injection via the brands attribute of the products shortcode in all versions up to 3.6.2, caused by insufficient escaping of user-supplied input and inadequate preparation of the ex...

6.5CVSS6.2AI score0.00028EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/24 10:28 p.m.5 views

CVE-2025-10144 Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection

The Perfect Brands for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the brands attribute of the products shortcode in all versions up to, and including, 3.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS0.00028EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.3 views

PT-2025-47974

Name of the Vulnerable Software and Affected Versions The Perfect Brands for WooCommerce plugin for WordPress versions through 3.6.2 Description The Perfect Brands for WooCommerce plugin for WordPress is susceptible to time-based SQL Injection through the brands attribute of the products shortcod...

6.5CVSS7.1AI score0.00028EPSS
Exploits0References5
Rows per page
Query Builder