WP-Safety

YITH WooCommerce Brands Add-On Security & Risk Analysis

wordpress.org/plugins/yith-woocommerce-brands-add-on

A tool to show your products’ brands, generate reliability and guarantee the quality of your products.

10K active installs v2.39.0 PHP 7.4+ WP 6.7+ Updated Mar 2, 2026
brandbrandslogomanufactureryith
99
A · Safe
CVEs total1
Unpatched0
Last CVENov 11, 2022
Plugin page Download
Safety Verdict

Is YITH WooCommerce Brands Add-On Safe to Use in 2026?

Generally Safe

Score 99/100

YITH WooCommerce Brands Add-On has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Nov 11, 2022Updated 1mo ago
Risk Assessment

The "yith-woocommerce-brands-add-on" plugin v2.39.0 exhibits a generally strong security posture with several positive indicators. The comprehensive use of prepared statements for all SQL queries and the high percentage of properly escaped output suggest good development practices regarding data handling and presentation. Furthermore, the plugin demonstrates diligent implementation of security measures with a significant number of nonce and capability checks, indicating an effort to protect against common WordPress attacks. The absence of critical or high severity taint flows is also a very positive sign, showing that user-supplied data is generally handled safely within the code.

Key Concerns

  • AJAX handler without authentication check
  • One historical high severity vulnerability
  • Bundled library (Select2) potentially outdated
Vulnerabilities
1

YITH WooCommerce Brands Add-On Security Vulnerabilities

CVEs by Year

1 CVE in 2022
2022
Patched Has unpatched

Severity Breakdown

High
1

1 total CVE

WF-b948574a-0aab-4596-83e6-04be21f78bc1-yith-woocommerce-brands-add-onhigh · 7.1Missing Authorization

YITH plugins by YITHEMES <= (Various Versions) - Missing Authorization

Nov 11, 2022 Patched in 2.6.0 (438d)
Code Analysis
Analyzed Mar 16, 2026

YITH WooCommerce Brands Add-On Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
5 prepared
Unescaped Output
93
1477 escaped
Nonce Checks
15
Capability Checks
16
File Operations
0
External Requests
7
Bundled Libraries
1

Bundled Libraries

Select2

SQL Query Safety

100% prepared5 total queries

Output Escaping

94% escaped1570 total outputs
Data Flows
All sanitized

Data Flow Analysis

13 flows
do_shortcode (plugin-fw\includes\builders\gutenberg\class-yith-gutenberg.php:279)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
1 unprotected

YITH WooCommerce Brands Add-On Attack Surface

Entry Points7
Unprotected1

AJAX Handlers 5

authwp_ajax_yith_plugin_fw_gutenberg_do_shortcodeplugin-fw\includes\builders\gutenberg\class-yith-gutenberg.php:63
authwp_ajax_yith_plugin_fw_save_toggle_element_metaboxplugin-fw\includes\class-yit-metabox.php:86
authwp_ajax_yith_plugin_fw_save_toggle_elementplugin-fw\includes\class-yit-plugin-panel.php:138
authwp_ajax_yith_bh_onboardingplugin-fw\includes\class-yith-bh-onboarding.php:37
authwp_ajax_yith_create_log_fileplugin-fw\includes\class-yith-system-status.php:101

Shortcodes 2

[yith_wcbr_show_brand] includes\class-yith-wcbr-shortcode.php:35
[yith_wcbr_product_brand] includes\class-yith-wcbr-shortcode.php:36
WordPress Hooks 133
actionadmin_menuincludes\class-yith-wcbr-admin.php:73
filteryith_show_plugin_row_metaincludes\class-yith-wcbr-admin.php:77
actionadmin_enqueue_scriptsincludes\class-yith-wcbr-admin.php:80
actioninitincludes\class-yith-wcbr-admin.php:83
actioncreated_termincludes\class-yith-wcbr-admin.php:84
actionedit_termincludes\class-yith-wcbr-admin.php:85
actioninitincludes\class-yith-wcbr-admin.php:88
filtertag_row_actionsincludes\class-yith-wcbr-admin.php:93
filterterm_updated_messagesincludes\class-yith-wcbr-admin.php:95
filterwoocommerce_screen_idsincludes\class-yith-wcbr-admin.php:97
actionvc_before_initincludes\class-yith-wcbr-shortcode.php:30
actioninitincludes\class-yith-wcbr-shortcode.php:31
actionyith_plugin_fw_gutenberg_before_do_shortcodeincludes\class-yith-wcbr-shortcode.php:32
actioninitincludes\class-yith-wcbr-shortcode.php:33
filterwoocommerce_has_block_templateincludes\class-yith-wcbr-template-loader.php:33
filterget_block_templatesincludes\class-yith-wcbr-template-loader.php:34
filterpre_get_block_file_templateincludes\class-yith-wcbr-template-loader.php:35
filtertaxonomy_template_hierarchyincludes\class-yith-wcbr-template-loader.php:36
actioninitincludes\class-yith-wcbr.php:75
actioninitincludes\class-yith-wcbr.php:78
actionwp_enqueue_scriptsincludes\class-yith-wcbr.php:79
filteryith_wcan_product_taxonomy_typeincludes\class-yith-wcbr.php:81
actionafter_setup_themeincludes\class-yith-wcbr.php:84
actioninitincludes\class-yith-wcbr.php:87
actioninitincludes\class-yith-wcbr.php:90
actionwpincludes\class-yith-wcbr.php:93
filteryith_wcbr_skip_single_brand_blockincludes\class-yith-wcbr.php:94
filteryit_layout_option_is_product_taxincludes\class-yith-wcbr.php:97
filterwoocommerce_change_term_countsincludes\class-yith-wcbr.php:100
actionwoocommerce_product_duplicateincludes\class-yith-wcbr.php:103
actionbefore_woocommerce_initincludes\class-yith-wcbr.php:105
actionwoocommerce_product_meta_endincludes\class-yith-wcbr.php:400
filterrender_block_core/post-termsincludes\class-yith-wcbr.php:411
filterget_termsincludes\functions.yith-wcbr.php:79
actionyith_wcbr_initinit.php:104
actionadmin_noticesinit.php:116
actionadmin_noticesinit.php:118
actionplugins_loadedinit.php:130
actionelementor/elements/categories_registeredplugin-fw\includes\builders\elementor\class-yith-elementor.php:50
actionelementor/editor/after_enqueue_stylesplugin-fw\includes\builders\elementor\class-yith-elementor.php:52
actionelementor/frontend/after_enqueue_stylesplugin-fw\includes\builders\elementor\class-yith-elementor.php:53
actioninitplugin-fw\includes\builders\gutenberg\class-yith-gutenberg.php:60
actioninitplugin-fw\includes\builders\gutenberg\class-yith-gutenberg.php:61
actioninitplugin-fw\includes\builders\gutenberg\class-yith-gutenberg.php:62
actionwc_ajax_yith_plugin_fw_gutenberg_do_shortcodeplugin-fw\includes\builders\gutenberg\class-yith-gutenberg.php:64
actioninitplugin-fw\includes\class-yit-assets.php:47
actionelementor/editor/before_enqueue_stylesplugin-fw\includes\class-yit-assets.php:48
actionadmin_enqueue_scriptsplugin-fw\includes\class-yit-assets.php:50
actioninitplugin-fw\includes\class-yit-assets.php:52
actionshould_load_block_editor_scripts_and_stylesplugin-fw\includes\class-yit-assets.php:53
actionadmin_enqueue_scriptsplugin-fw\includes\class-yit-icons.php:970
actionwp_enqueue_scriptsplugin-fw\includes\class-yit-icons.php:971
actionadd_meta_boxesplugin-fw\includes\class-yit-metabox.php:80
actionsave_postplugin-fw\includes\class-yit-metabox.php:81
actionadmin_enqueue_scriptsplugin-fw\includes\class-yit-metabox.php:82
filteryit_icons_screen_idsplugin-fw\includes\class-yit-metabox.php:84
filteradmin_body_classplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:93
actionadmin_initplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:94
actionadmin_menuplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:95
actionadmin_menuplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:96
actionadmin_bar_menuplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:97
actionadmin_enqueue_scriptsplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:98
actionadmin_initplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:99
filterwoocommerce_screen_idsplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:100
filterwoocommerce_admin_settings_sanitize_optionplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:102
actionyith_plugin_fw_get_field_afterplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:104
actionadmin_action_yith_plugin_fw_save_toggle_elementplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:105
filterwoocommerce_admin_settings_sanitize_optionplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:106
actionadmin_enqueue_scriptsplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:108
actionadmin_initplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:109
filteryith_plugin_fw_premium_landing_uriplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:112
actionwoocommerce_admin_field_boxinfoplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:126
actionwoocommerce_admin_field_yith-fieldplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:127
filterwoocommerce_admin_settings_sanitize_optionplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:129
actionadmin_menuplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:132
filteradd_menu_classesplugin-fw\includes\class-yit-plugin-panel-woocommerce.php:134
filteradmin_body_classplugin-fw\includes\class-yit-plugin-panel.php:121
actionadmin_initplugin-fw\includes\class-yit-plugin-panel.php:122
actionadmin_menuplugin-fw\includes\class-yit-plugin-panel.php:123
actionadmin_menuplugin-fw\includes\class-yit-plugin-panel.php:124
actionadmin_bar_menuplugin-fw\includes\class-yit-plugin-panel.php:125
actionadmin_initplugin-fw\includes\class-yit-plugin-panel.php:126
actionadmin_enqueue_scriptsplugin-fw\includes\class-yit-plugin-panel.php:128
actionadmin_initplugin-fw\includes\class-yit-plugin-panel.php:129
filteryith_plugin_fw_premium_landing_uriplugin-fw\includes\class-yit-plugin-panel.php:132
actionadmin_enqueue_scriptsplugin-fw\includes\class-yit-plugin-panel.php:137
actionall_admin_noticesplugin-fw\includes\class-yit-plugin-panel.php:242
actionadmin_footerplugin-fw\includes\class-yit-plugin-panel.php:243
filterparent_fileplugin-fw\includes\class-yit-plugin-panel.php:245
filtersubmenu_fileplugin-fw\includes\class-yit-plugin-panel.php:246
actionadmin_menuplugin-fw\includes\class-yit-plugin-panel.php:259
filteradd_menu_classesplugin-fw\includes\class-yit-plugin-panel.php:260
filterremovable_query_argsplugin-fw\includes\class-yit-plugin-panel.php:261
actionadmin_enqueue_scriptsplugin-fw\includes\class-yit-plugin-panel.php:1081
actionadmin_initplugin-fw\includes\class-yit-plugin-panel.php:1082
actionadmin_footerplugin-fw\includes\class-yit-plugin-panel.php:1213
actionadmin_initplugin-fw\includes\class-yit-plugin-subpanel.php:44
actionadmin_menuplugin-fw\includes\class-yit-plugin-subpanel.php:45
actionadmin_bar_menuplugin-fw\includes\class-yit-plugin-subpanel.php:46
actionadmin_initplugin-fw\includes\class-yit-plugin-subpanel.php:47
actionadmin_enqueue_scriptsplugin-fw\includes\class-yit-plugin-subpanel.php:48
actionadmin_enqueue_scriptsplugin-fw\includes\class-yit-pointers.php:118
actionadmin_initplugin-fw\includes\class-yit-pointers.php:119
actionyith_bh_onboardingplugin-fw\includes\class-yith-bh-onboarding.php:36
actionwp_dashboard_setupplugin-fw\includes\class-yith-dashboard.php:146
actionadmin_enqueue_scriptsplugin-fw\includes\class-yith-dashboard.php:147
actionadmin_initplugin-fw\includes\class-yith-post-type-admin.php:65
actioncurrent_screenplugin-fw\includes\class-yith-post-type-admin.php:67
actionedit_form_topplugin-fw\includes\class-yith-post-type-admin.php:70
actionmanage_posts_extra_tablenavplugin-fw\includes\class-yith-post-type-admin.php:119
actionmanage_posts_extra_tablenavplugin-fw\includes\class-yith-post-type-admin.php:120
actionrestrict_manage_postsplugin-fw\includes\class-yith-post-type-admin.php:122
filterrequestplugin-fw\includes\class-yith-post-type-admin.php:123
filterlist_table_primary_columnplugin-fw\includes\class-yith-post-type-admin.php:125
filterpost_row_actionsplugin-fw\includes\class-yith-post-type-admin.php:126
filterpage_row_actionsplugin-fw\includes\class-yith-post-type-admin.php:127
filterdefault_hidden_columnsplugin-fw\includes\class-yith-post-type-admin.php:129
actiondisable_months_dropdownplugin-fw\includes\class-yith-post-type-admin.php:137
filteradmin_body_classplugin-fw\includes\class-yith-system-status.php:95
actionadmin_menuplugin-fw\includes\class-yith-system-status.php:96
actionadmin_initplugin-fw\includes\class-yith-system-status.php:97
actionadmin_noticesplugin-fw\includes\class-yith-system-status.php:98
actionadmin_enqueue_scriptsplugin-fw\includes\class-yith-system-status.php:99
actioninitplugin-fw\includes\class-yith-system-status.php:100
filteryith_plugin_fw_privacy_guide_contentplugin-fw\includes\privacy\class-yith-privacy-plugin-abstract.php:39
actionadmin_initplugin-fw\includes\privacy\class-yith-privacy.php:50
actionplugins_loadedplugin-fw\init.php:94
filterextra_theme_headersplugin-fw\yit-functions.php:602
filteryit_title_special_charactersplugin-fw\yit-functions.php:726
filterplugin_row_metaplugin-fw\yit-plugin.php:56
actionadmin_noticesplugin-fw\yit-plugin.php:298
actionplugins_loadedplugin-fw\yit-plugin.php:300
actionshutdownplugin-fw\yit-woocommerce-compatibility.php:765
Maintenance & Trust

YITH WooCommerce Brands Add-On Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 2, 2026
PHP min version7.4
Downloads752K

Community Trust

Rating80/100
Number of ratings7
Active installs10K
Alternatives

YITH WooCommerce Brands Add-On Alternatives

Smart Brands for WooCommerce

Smart Brands for WooCommerce

smart-brands-for-woocommerce

A
100

Create unlimited brands to assign to your products, highlight the brands of the products you sell, and boost sales instantly!

400 No CVEs
Easy Woocommerce Brands

Easy Woocommerce Brands

easy-woocommerce-brands

A
100

Easy Woocommerce Brands plugin allow you to add brands to your WooCommerce products on your website with any WordPress theme Easy to use and 100% Fr &hellip;

50 No CVEs
Perfect Brands for WooCommerce

Perfect Brands for WooCommerce

perfect-woocommerce-brands

A
95

Perfect Brands for WooCommerce allows you to show product brands in your WooCommerce based store

50K 4 CVEs
MAS Brands for WooCommerce

MAS Brands for WooCommerce

mas-woocommerce-brands

A
92

Brands plugin for WooCommerce by MadrasThemes.

10K No CVEs
Brands for WooCommerce

Brands for WooCommerce

brands-for-woocommerce

A
95

Brands for WooCommerce plugin allows you to add brands for products in your shop.

6K 4 CVEs
Developer Profile

YITH WooCommerce Brands Add-On Developer Profile

YITHEMES

33 plugins · 1.1M total installs

77
trust score
Avg Security Score
97/100
Avg Patch Time
411 days
View full developer profile
Detection Fingerprints

How We Detect YITH WooCommerce Brands Add-On

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/yith-woocommerce-brands-add-on/assets/css/yith-wcbr-admin.css/wp-content/plugins/yith-woocommerce-brands-add-on/assets/css/yith-wcbr-frontend.css/wp-content/plugins/yith-woocommerce-brands-add-on/assets/js/yith-wcbr-admin.js/wp-content/plugins/yith-woocommerce-brands-add-on/assets/js/yith-wcbr-frontend.js
Script Paths
/wp-content/plugins/yith-woocommerce-brands-add-on/assets/js/yith-wcbr-admin.js/wp-content/plugins/yith-woocommerce-brands-add-on/assets/js/yith-wcbr-frontend.js
Version Parameters
yith-woocommerce-brands-add-on/assets/css/yith-wcbr-admin.css?ver=yith-woocommerce-brands-add-on/assets/css/yith-wcbr-frontend.css?ver=yith-woocommerce-brands-add-on/assets/js/yith-wcbr-admin.js?ver=yith-woocommerce-brands-add-on/assets/js/yith-wcbr-frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
yith-wcbr-admin-wrapyith-wcbr-frontend-wrap
HTML Comments
<!-- YITH WooCommerce Brands Add-On --><!-- YITH Plugin Framework -->
Data Attributes
data-yith-wcbr-iddata-yith-wcbr-slug
JS Globals
yith_wcbr_admin_optionsyith_wcbr_frontend_params
Shortcode Output
[yith_wcbr_brands_list][yith_wcbr_brands_single][yith_wcbr_product_brands]
FAQ

Frequently Asked Questions about YITH WooCommerce Brands Add-On