Berocket
7 CVEs across 9 Berocket products. Browse Berocket vulnerabilities, severities, and proof-of-concept exploits.
Berocket products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-66439 | High | 7.1 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions. |
CVE-2026-15648 | Medium | 6.4 | 2026-07-24 | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'width' Shortcode Attribute in all versions up to, and includi… |
CVE-2026-15794 | Medium | 6.4 | 2026-07-23 | The Grid/List View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'position' Shortcode Attribute in all versions up to… |
CVE-2026-15647 | Medium | 4.4 | 2026-07-23 | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field in all versions up to, and… |
CVE-2026-15646 | Medium | 6.4 | 2026-07-23 | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and includi… |
CVE-2026-57758 | High | 7.1 | 2026-07-02 | Unauthenticated Cross Site Request Forgery (CSRF) in Permalink Manager for WooCommerce <= 1.0.8.2 versions. |
CVE-2022-45813 | Medium | 5.4 | 2026-06-11 | Missing Authorization vulnerability in BeRocket Advanced AJAX Product Filters allows Exploiting Incorrectly Configured Access Control Security Levels. This is… |
CVE-2026-1426 | High | 8.8 | 2026-02-18 | The Advanced AJAX Product Filters plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.9.6 via deserialization… |
CVE-2025-68519 | High | 8.5 | 2025-12-24 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce al… |
CVE-2025-32263 | Medium | 4.3 | 2025-04-04 | Cross-Site Request Forgery (CSRF) vulnerability in BeRocket Sequential Order Numbers for WooCommerce sequential-order-numbers-for-woocommerce allows Cross Site… |
CVE-2025-1505 | Medium | 6.1 | 2025-02-28 | The Advanced AJAX Product Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and inc… |
CVE-2023-44149 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2021-24432 | Medium | 6.1 | 2024-01-16 | The Advanced AJAX Product Filters WordPress plugin does not sanitise the 'term_id' POST parameter before outputting it in the page, leading to reflected Cross-… |
CVE-2023-23667 | Medium | 6.5 | 2023-05-18 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in BeRocket Brands for WooCommerce plugin <= 3.7.0.6 versions. |
CVE-2022-2518 | High | 8.8 | 2022-09-06 | The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2.1. This is due t… |
CVE-2022-0399 | Medium | 6.1 | 2022-03-14 | The Advanced Product Labels for WooCommerce WordPress plugin before 1.2.3.7 does not sanitise and escape the tax_color_set_type parameter before outputting it… |