BE
Vendor
berocket
17
CVEs
0
On KEV
1
New 30D
Products
SO6.4
Sequential Order Numbers for WooCommerce
berocket
2 CVEs0 on KEV1 new
BF8.5
Brands for WooCommerce
berocket
6 CVEs0 on KEV0 new
AA8.8
Advanced AJAX Product Filters
berocket
5 CVEs0 on KEV0 new
AP6.1
Advanced Product Labels For Woocommerce
Berocket
1 CVEs0 on KEV0 new
GV6.4
Grid/List View for WooCommerce
berocket
1 CVEs0 on KEV0 new
PM7.1
Permalink Manager for WooCommerce
BeRocket
1 CVEs0 on KEV0 new
SM6.1
Stockists Manager For Woocommerce
Berocket
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104727 New | SO Sequential Order Numbers for WooCommerce berocket | 6.4 | Oct 29 | Sequential Order Numbers for WooCommerce <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'condition' Post Meta Array Keys |
| CVE-2026-66439 | AA Advanced AJAX Product Filters BeRocket | 7.1 | Aug 6 | WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-15648 | BF Brands for WooCommerce berocket | 6.4 | Jul 24 | Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute |
| CVE-2026-15794 | GV Grid/List View for WooCommerce berocket | 6.4 | Jul 23 | Grid/List View for WooCommerce <= 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position' Shortcode Attribute |
| CVE-2026-15646 | BF Brands for WooCommerce berocket | 6.4 | Jul 23 | Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute |
| CVE-2026-15647 | BF Brands for WooCommerce berocket | 4.4 | Jul 23 | Brands for WooCommerce <= 3.8.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field |
| CVE-2026-57758 | PM Permalink Manager for WooCommerce BeRocket | 7.1 | Jul 2 | WordPress Permalink Manager for WooCommerce plugin <= 1.0.8.2 - CSRF to Stored XSS vulnerability |
| CVE-2022-45813 | AA Advanced AJAX Product Filters BeRocket | 5.4 | Jun 11 | WordPress Advanced AJAX Product Filters plugin <= 1.6.3.3 - Broken Access Control + CSRF |
| CVE-2026-1426 | AA Advanced AJAX Product Filters berocket | 8.8 | Feb 18 | Advanced AJAX Product Filters <= 3.1.9.6 - Authenticated (Author+) PHP Object Injection via Live Composer Compatibility |
| CVE-2025-68519 | BF Brands for WooCommerce BeRocket | 8.5 | Dec 24 | WordPress Brands for WooCommerce plugin <= 3.8.6.3 - SQL Injection vulnerability |
| CVE-2025-32263 | SO Sequential Order Numbers for WooCommerce BeRocket | 4.3 | Apr 4 | WordPress Sequential Order Numbers for WooCommerce plugin <= 3.6.2 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-1505 | AA Advanced AJAX Product Filters berocket | 6.1 | Feb 28 | Advanced AJAX Product Filters <= 1.6.8.1 - Reflected Cross-Site Scripting |
| CVE-2023-44149 | BF Brands for WooCommerce BeRocket | 5.3 | Dec 13 | WordPress Brands for WooCommerce plugin <= 3.8.2.2 - Broken Access Control vulnerability |
| CVE-2021-24432 | AA Advanced Ajax Product Filters Berocket | 6.1 | Jan 16 | Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS) |
| CVE-2023-23667 | BF Brands For Woocommerce Berocket | 5.4 | May 18 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in BeRocket Brands for WooCommerce plugin <= 3.7.0.6 versions |
| CVE-2022-2518 | SM Stockists Manager For Woocommerce Berocket | 6.1 | Sep 6 | The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2.1 |
| CVE-2022-0399 | AP Advanced Product Labels For Woocommerce Berocket | 6.1 | Mar 14 | The Advanced Product Labels for WooCommerce WordPress plugin before 1.2.3.7 does not sanitise and escape the tax_color_set_type parameter before outputting it back in the… |