medium4.3
CVE-2022-23981
The vulnerability allows Subscriber+ level users to create brands in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4).
Impact
The vulnerability allows Subscriber+ level users to create brands in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quadlayers | Perfect Brands For Woocommerce | through 2.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://patchstack.com/database/vulnerability/perfect-woocommerce-brands/wordpress-perfect-brands-for-woocommerce-plugin-2-0-4-subscriber-set-featured-brand-vulnerability
- https://wordpress.org/plugins/perfect-woocommerce-brands/#developers
- https://patchstack.com/database/vulnerability/perfect-woocommerce-brands/wordpress-perfect-brands-for-woocommerce-plugin-2-0-4-subscriber-set-featured-brand-vulnerability
- https://wordpress.org/plugins/perfect-woocommerce-brands/#developers