Skip to content
OpenAdvisories
High · 8.5 CVE-2025-58686 EUVD-2025-30512GHSA-2fgr-v6mx-rmch

WordPress Perfect Brands for WooCommerce plugin <= 3.6.2 - SQL Injection vulnerability

Published Sep 22, 2025 · Updated May 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quadlayers Perfect Brands for WooCommerce perfect-woocommerce-brands allows SQL Injection.This issue affects Perfect Brands for WooCommerce: from n/a through <= 3.6.2.

Affected products

VendorProductAffectedFixed
quadlayers Perfect Brands for WooCommerce ≤ 3.6.2 —

References