CVE-2022-23981 is a medium-severity vulnerability affecting the Perfect Brands for WooCommerce plugin (versions <= 2.0.4) for WordPress, allowing authenticated users with Subscriber+ privileges to create new brands. The attack requires low privileges and no user interaction, but its impact is limited to low integrity, with no confidentiality or availability concerns. While no active exploits, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion have been observed, organizations using the affected plugin should still consider patching to mitigate potential misuse.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.0.4CPE matchmatch criteria | cpe:2.3:a:quadlayers:perfect_brands_for_woocommerce:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.