4.3 Moyenne

CVE-2025-12783 The Premmerce Brands for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a…

Description

The Premmerce Brands for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveBrandsSettings function in all versions up to, and including, 1.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify brand permalink settings.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Premmerce Brands for WooCommerce 1.2	premières → 1.2.13	Pas de correctif indiqué

Les 3 CVE de Premmerce Brands for WooCommerce →

CVE-2025-62890 Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Brands for WooCommerce… 4.3 Moyenne CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Moyenne

Vous utilisez Premmerce Brands for WooCommerce ?

Suivre cette CVE Surveiller Premmerce Brands for WooCommerce Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2025-12783

Chronologie

Publiée 12 décembre 2025
Dernière modification 8 avril 2026

Références

www.wordfence.com www.wordfence.com
plugins.trac.wordpress.org plugins.trac.wordpress.org
plugins.trac.wordpress.org plugins.trac.wordpress.org

Suivre cette CVE

CVE-2025-12783 The Premmerce Brands for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a…

Description

Produits et versions touchés

Autres CVE de Premmerce Brands for WooCommerce