Premmerce Premmerce Brands for WooCommerce vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Premmerce Premmerce Brands for WooCommerce: 2 record(s), with affected versions and fixes.
CVE-2025-12783
Medium · 4.3
CWE-862 Dec 12, 2025
Premmerce Brands for WooCommerce <= 1.2.13 - Missing Authorization To Authenticated (Subscriber+) Brand Permalink Settings Update
The Premmerce Brands for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveBrandsSettings function in all versions up to, and including, 1.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify brand permalink settings.
CVE-2025-62890
Medium · 4.3
CWE-352 Oct 26, 2025
WordPress Premmerce Brands for WooCommerce plugin <= 1.2.13 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Brands for WooCommerce premmerce-woocommerce-brands allows Cross Site Request Forgery.This issue affects Premmerce Brands for WooCommerce: from n/a through <= 1.2.13.