CVE-2025-10144 | quadlayers Perfect Brands for WooCommerce Plugin up to 3.6.2 on WordPress Shortcode products brands sql injection

A vulnerability classified as critical was found in quadlayers Perfect Brands for WooCommerce Plugin up to 3.6.2 on WordPress. This affects the function Products of the component Shortcode Handler. Such manipulation of the argument brands leads to sql injection.

This vulnerability is listed as CVE-2025-10144. The attack may be performed from remote. There is no available exploit.