SQL Injection Vulnerability in Perfect Brands for WooCommerce by QuadLayers

CVE-2025-58686

What is CVE-2025-58686?

A vulnerability exists in the Perfect Brands for WooCommerce plugin developed by QuadLayers, allowing attackers to exploit improper neutralization of special elements within SQL commands. This opens the door for SQL injection attacks, which can lead to unauthorized access to sensitive data, database manipulation, and potential system takeover. Affected versions range from n/a to 3.6.0, making it crucial for users to update their installations to mitigate risks.

References