Brandy

Brandy has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Brandy has a vendor fix available, so running the current release closes it.

All of these findings were reported by stealthcopter. Brandy is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Brandy vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-54348

Brand <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2024-12-11 00:00	Brand <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Brandy <= 1.1.6	`CVE-2024-54348`	6.4 Medium	stealthcopter	Yes

Showing 1–1 of 1 reports

Latestv2.0.0

Brandy

Author

YayCommerce

5.0(2)

100/100

Last Updated

2026-08-22 (22d ago)

Active Installs

100+

Downloads

5,321

Requires WP

6.6+

Requires PHP

7.4+

Created

2024-07-25 (2y ago)

Brandy is a fast, lightweight, and elegant ecommerce WordPress theme by YayCommerce. Perfect for online stores, fashion shops, electronics, furniture, and any WooCommerce website. Launch in minutes with the Brandy Sites plugin: 20+ ready-made starter templates you can import in one click. Brandy works seamlessly with the Gutenberg block editor and Full Site Editing, and pairs with the Brandy Blocks plugin for 60+ pre-built custom blocks — product grids, sliders, testimonials, pricing tables, and more. Flexible theme options let any WordPress user customize colors, typography, and layouts with no coding required, and every layout looks fantastic on desktop, tablet, and mobile. Try the full set of patterns at our pattern showcase: https://wppatterns.io/