Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-44149 EUVD-2023-48508GHSA-jv99-wf4f-255j

WordPress Brands for WooCommerce plugin <= 3.8.2.2 - Broken Access Control vulnerability

Published Dec 13, 2024 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brands for WooCommerce: from n/a through <= 3.8.2.2.

Affected products

VendorProductAffectedFixed
BeRocket Brands for WooCommerce ≤ 3.8.2.2 —

References