Skip to content

Berocket vulnerabilities

Products

Newest

berocket sequential order numbers for woocommerce Sequential Order Numbers for WooCommerce <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'condition' Post Meta Array Keys CVE-2026-104727 6.4 MediumOctober 29, 2026
berocket advanced ajax product filters WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-66439 7.1 HighAugust 6, 2026
berocket brands for woocommerce Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute CVE-2026-15648 6.4 MediumJuly 24, 2026
berocket grid/list view for woocommerce Grid/List View for WooCommerce <= 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position' Shortcode Attribute CVE-2026-15794 6.4 MediumJuly 23, 2026
berocket brands for woocommerce Brands for WooCommerce <= 3.8.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field CVE-2026-15647 4.4 MediumJuly 23, 2026
berocket brands for woocommerce Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute CVE-2026-15646 6.4 MediumJuly 23, 2026
berocket permalink manager for woocommerce WordPress Permalink Manager for WooCommerce plugin <= 1.0.8.2 - CSRF to Stored XSS vulnerability CVE-2026-57758 7.1 HighJuly 2, 2026
berocket advanced ajax product filters WordPress Advanced AJAX Product Filters plugin <= 1.6.3.3 - Broken Access Control + CSRF CVE-2022-45813 5.4 MediumJune 11, 2026
berocket advanced ajax product filters Advanced AJAX Product Filters <= 3.1.9.6 - Authenticated (Author+) PHP Object Injection via Live Composer Compatibility CVE-2026-1426 8.8 HighFebruary 18, 2026
berocket brands for woocommerce WordPress Brands for WooCommerce plugin <= 3.8.6.3 - SQL Injection vulnerability CVE-2025-68519 8.5 HighDecember 24, 2025
berocket sequential order numbers for woocommerce WordPress Sequential Order Numbers for WooCommerce plugin <= 3.6.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-32263 4.3 MediumApril 4, 2025
berocket advanced ajax product filters Advanced AJAX Product Filters <= 1.6.8.1 - Reflected Cross-Site Scripting CVE-2025-1505 6.1 MediumFebruary 28, 2025
berocket brands for woocommerce WordPress Brands for WooCommerce plugin <= 3.8.2.2 - Broken Access Control vulnerability CVE-2023-44149 5.3 MediumDecember 13, 2024
berocket advanced ajax product filters Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24432 6.1 MediumJanuary 16, 2024
berocket brands for woocommerce WordPress Brands for WooCommerce Plugin <= 3.7.0.6 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23667 6.5 MediumMay 18, 2023
berocket stockists manager for woocommerce Stockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2022-2518 8.8 HighSeptember 6, 2022
berocket advanced product labels for woocommerce Advanced Product Labels for WooCommerce < 1.2.3.7 - Reflected Cross-Site Scripting CVE-2022-0399 6.1 MediumMarch 14, 2022