Vulnerabilidades do Premmerce Premmerce Brands for WooCommerce
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Premmerce Premmerce Brands for WooCommerce: 2 registro(s), com versões afetadas e correções.
CVE-2025-12783
Média · 4.3
CWE-862 12/12/2025
Premmerce Brands for WooCommerce <= 1.2.13 - Missing Authorization To Authenticated (Subscriber+) Brand Permalink Settings Update
The Premmerce Brands for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveBrandsSettings function in all versions up to, and including, 1.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify brand permalink settings.
CVE-2025-62890
Média · 4.3
CWE-352 26/10/2025
WordPress Premmerce Brands for WooCommerce plugin <= 1.2.13 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Brands for WooCommerce premmerce-woocommerce-brands allows Cross Site Request Forgery.This issue affects Premmerce Brands for WooCommerce: from n/a through <= 1.2.13.