CVE-2023-35880: Woocommerce Brands

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.49 versions.

Affected products

• Woocommerce Brands: before 1.6.50 (fixed in 1.6.50)

Published 2023-07-17. Last modified 2026-06-17.