Security vulnerability found in Perfect Brands for WooCommerce

Hi there, I hope you’re doing well. While reviewing my WordPress security dashboard, I noticed a critical security warning related to the Perfect Brands for WooCommerce plugin (version 3.6.2 ). The alert was reported on October 12, 2025 , with a severity score of 6.5/10 . Here’s the official report link from Wordfence for your reference: 🔗 https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/perfect-woocommerce-brands/perfect-brands-for-woocommerce-362-authenticated-contributor-sql-injection Could you please confirm whether this issue has already been addressed or if a patched update is in progress? I’d prefer not to deactivate the plugin unless necessary, but I want to ensure my website remains secure. Thank you in advance for your help and for maintaining this great plugin. Best regards The page I need help with: [ log in to see the link] @splusweb Hi guys, Thanks for the report. Our development team is already aware of this and is currently investigating the issue. Best regards, QuadLayers Support Team