CVE-2026-15648 | berocket Brands for WooCommerce Plugin up to 3.8.8 on WordPress Shortcode width cross site scripting

July 24, 2026 Yanac

A vulnerability marked as problematic has been reported in berocket Brands for WooCommerce Plugin up to 3.8.8 on WordPress. This vulnerability affects unknown code of the component Shortcode Handler. Performing a manipulation of the argument width results in cross site scripting.

This vulnerability is cataloged as CVE-2026-15648. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More