Premmerce Brands for WooCommerce, CVE-2025-12783

CVE, Research URL: CVE-2025-12783
Home page URL: Security reports for Premmerce Brands for WooCommerce
Application: Premmerce Brands for WooCommerce
Published on: Dec 12, 2025
Research Description: The Premmerce Brands for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveBrandsSettings function in all versions up to, and including, 1.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify brand permalink settings.
Affected versions: max 1.2.13.
Status: vulnerable