BeRocket vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20253
4. 20269

Newest CVEs

• CVE-2026-104727

  Sequential Order Numbers for WooCommerce <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'condition' Post Meta Array Keys

  berocket · Sequential Order Numbers for WooCommerce

  Medium6.4
• CVE-2026-66439

  WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability

  BeRocket · Advanced AJAX Product Filters

  High7.1
• CVE-2026-15648

  Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute

  berocket · Brands for WooCommerce

  Medium6.4
• CVE-2026-15794

  Grid/List View for WooCommerce <= 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position' Shortcode Attribute

  berocket · Grid/List View for WooCommerce

  Medium6.4
• CVE-2026-15646

  Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute

  berocket · Brands for WooCommerce

  Medium6.4
• CVE-2026-15647

  Brands for WooCommerce <= 3.8.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field

  berocket · Brands for WooCommerce

  Medium4.4
• CVE-2026-57758

  WordPress Permalink Manager for WooCommerce plugin <= 1.0.8.2 - CSRF to Stored XSS vulnerability

  BeRocket · Permalink Manager for WooCommerce

  High7.1
• CVE-2022-45813

  WordPress Advanced AJAX Product Filters plugin <= 1.6.3.3 - Broken Access Control + CSRF

  BeRocket · Advanced AJAX Product Filters

  Medium5.4
• CVE-2026-1426

  Advanced AJAX Product Filters <= 3.1.9.6 - Authenticated (Author+) PHP Object Injection via Live Composer Compatibility

  berocket · Advanced AJAX Product Filters

  High8.8
• CVE-2025-68519

  WordPress Brands for WooCommerce plugin <= 3.8.6.3 - SQL Injection vulnerability

  BeRocket · Brands for WooCommerce

  High8.5