Skip to content
Sign in
4.3 Medium

CVE-2025-12783 The Premmerce Brands for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a…

Description

The Premmerce Brands for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveBrandsSettings function in all versions up to, and including, 1.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify brand permalink settings.

Affected products and versions

Product Affected versions Fixed in
Premmerce Brands for WooCommerce 1.2 earliest → 1.2.13 No fix stated

Other CVEs of Premmerce Brands for WooCommerce

The 3 CVEs of Premmerce Brands for WooCommerce →
CVE-2025-62890 Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Brands for WooCommerce… 4.3 Medium CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium
Track this CVE