Advisories · Technology

mihail-barinov Advanced Woo Labels – Product Labels & Badges for WooCommerce.

Every CVE that names mihail-barinov Advanced Woo Labels – Product Labels & Badges for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12241 CVE record

CVSS 5.4 Medium

Advanced Woo Labels – Product Labels & Badges for WooCommerce <= 2.51 - Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
- mihail-barinov Advanced Woo Labels – Product Labels & Badges for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 1 Oct 2026
CVE-2026-15662 CVE record

CVSS 6.4 Medium

Advanced Woo Labels <= 2.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_color' Parameter
- mihail-barinov Advanced Woo Labels – Product Labels & Badges for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 1 Aug 2026
CVE-2026-1929 CVE record

CVSS 8.8 High

Advanced Woo Labels <= 2.37 - Authenticated (Contributor+) Remote Code Execution via 'callback' Parameter
- mihail-barinov Advanced Woo Labels – Product Labels & Badges for WooCommerce
- Code injection
Not analysed yet 25 Feb 2026