PT-2025-50807

CVE-2025-12783

Published

2025-12-11

Updated

2025-12-12

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Premmerce Brands for WooCommerce plugin for WordPress versions through 1.2.13

Description The Premmerce Brands for WooCommerce plugin for WordPress has a flaw that allows unauthorized data modification. This is due to a missing capability check within the saveBrandsSettings function. Authenticated attackers with Subscriber-level access or higher can modify brand permalink settings.

Recommendations Update the Premmerce Brands for WooCommerce plugin to a version later than 1.2.13.

Exploitability

Fix

Impacts

Researchers

Athiwat Tiprasaharn

Powpy

Vendors

Affected products

Weakness enumeration

CWE-862: Missing Authorization

Related identifiers