All vulnerabilities

WordPress plugins

CVE-2026-116107

Datafeedr Product Sets Plugin AJAX Handlers ajax.php dfrps_ajax_delete_saved_search authorization

Severity
Medium 5.3
Published
26 Oct 2026
Last changed
26 Oct 2026
Added to UpHeron
26 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Datafeedr Product Sets (WordPress plugin)WordPress plugins · wp-plugin:datafeedr-product-sets
  • Version 1.3.24
  • Version 1.3.23
  • Version 1.3.22
  • Version 1.3.21
All 25 release lines
  • Version 1.3.0
  • Version 1.3.1
  • Version 1.3.2
  • Version 1.3.3
  • Version 1.3.4
  • Version 1.3.5
  • Version 1.3.6
  • Version 1.3.7
  • Version 1.3.8
  • Version 1.3.9
  • Version 1.3.10
  • Version 1.3.11
  • Version 1.3.12
  • Version 1.3.13
  • Version 1.3.14
  • Version 1.3.15
  • Version 1.3.16
  • Version 1.3.17
  • Version 1.3.18
  • Version 1.3.19
  • Version 1.3.20
  • Version 1.3.21
  • Version 1.3.22
  • Version 1.3.23
  • Version 1.3.24

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-116107