CVE-2026-15646 | berocket Brands for WooCommerce Plugin up to 3.8.8 on WordPress Shortcode style cross site scripting

July 23, 2026 Yanac

A vulnerability has been found in berocket Brands for WooCommerce Plugin up to 3.8.8 on WordPress and classified as problematic. Impacted is an unknown function of the component Shortcode Handler. Performing a manipulation of the argument style results in cross site scripting.

This vulnerability is reported as CVE-2026-15646. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More