PT-2025-38974 · Woocommerce · Perfect Brands For Woocommerce

Published 2025-09-22 · Updated 2025-09-24 · CVE-2025-58686

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions Perfect Brands for WooCommerce versions through 3.6.0

Description A flaw exists in Perfect Brands for WooCommerce that allows for SQL Injection. This occurs due to improper neutralization of special elements within SQL commands. The issue enables attackers to exploit SQL commands by injecting malicious code.

Recommendations Update Perfect Brands for WooCommerce to a version later than 3.6.0.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-58686

Affected Products

Perfect Brands For Woocommerce

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-58686 · Security Note
• https://patchstack.com/database/wordpress/plugin/perfect-woocommerce-brands/vulnerability/wordpress-perfect-brands-for-woocommerce-plugin-3-6-0-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1970765358882558459 · Twitter Post
• https://twitter.com/CveFindCom/status/1970196310260125736 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/perfect-woocommerce-brands/vulnerability/wordpress-perfect-brands-for-woocommerce-plugin-3-6-0-sql-injection-vulnerability?_s_id=cve · Note