Skip to content
OpenAdvisories

Vendor

BeRocket

14 known vulnerabilities.

Products

Brands for WooCommerce 6 Advanced AJAX Product Filters 4 Sequential Order Numbers for WooCommerce 2 Permalink Manager for WooCommerce 1 Grid/List View for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-66439

    WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions.

    BeRocket Advanced AJAX Product Filters
  • High 7.1
    CVE-2026-57758

    WordPress Permalink Manager for WooCommerce plugin <= 1.0.8.2 - CSRF to Stored XSS vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in Permalink Manager for WooCommerce <= 1.0.8.2 versions.

    BeRocket Permalink Manager for WooCommerce Web / CMS
  • High 8.8
    CVE-2026-1426

    Advanced AJAX Product Filters <= 3.1.9.6 - Authenticated (Author+) PHP Object Injection via Live Composer Compatibility

    The Advanced AJAX Product Filters plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.9.6 via deserialization of untrusted input in the shortcode_check function within the Live Composer compatibility layer. Thi…

    BeRocket Advanced AJAX Product Filters Web / CMS
  • High 8.5
    CVE-2025-68519

    WordPress Brands for WooCommerce plugin <= 3.8.6.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Blind SQL Injection.This issue affects Brands for WooCommerce: from n/a through <= 3.8.6.3.

    BeRocket Brands for WooCommerce Web / CMS