All vulnerabilities
CVE-2026-116107

Datafeedr Product Sets Plugin AJAX Handlers ajax.php dfrps_ajax_delete_saved_search authorization

Datafeedr Product Sets Plugin
Open in ThreatlineRecord JSON
CVSS
5.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published26 Oct 2026Updated 26 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

Description

A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. Affected by this issue is the function dfrps_ajax_delete_saved_search of the file functions/ajax.php of the component AJAX Handlers. The manipulation results in missing authorization. The attack may be launched remotely. The exploit is now public and may be used. Upgrading to version 1.3.25 can resolve this issue. Upgrading the affected component is advised. The vendor was contacted early about this disclosure.

Text from CVE List

Affected versions 26

  • Product Sets Pluginaffected: 1.3.0CVE List
  • Product Sets Pluginaffected: 1.3.1CVE List
  • Product Sets Pluginaffected: 1.3.2CVE List
  • Product Sets Pluginaffected: 1.3.3CVE List
  • Product Sets Pluginaffected: 1.3.4CVE List
  • Product Sets Pluginaffected: 1.3.5CVE List
  • Product Sets Pluginaffected: 1.3.6CVE List
  • Product Sets Pluginaffected: 1.3.7CVE List
  • Product Sets Pluginaffected: 1.3.8CVE List
  • Product Sets Pluginaffected: 1.3.9CVE List
  • Product Sets Pluginaffected: 1.3.10CVE List
  • Product Sets Pluginaffected: 1.3.11CVE List
  • Product Sets Pluginaffected: 1.3.12CVE List
  • Product Sets Pluginaffected: 1.3.13CVE List
  • Product Sets Pluginaffected: 1.3.14CVE List
  • Product Sets Pluginaffected: 1.3.15CVE List
  • Product Sets Pluginaffected: 1.3.16CVE List
  • Product Sets Pluginaffected: 1.3.17CVE List
  • Product Sets Pluginaffected: 1.3.18CVE List
  • Product Sets Pluginaffected: 1.3.19CVE List
  • Product Sets Pluginaffected: 1.3.20CVE List
  • Product Sets Pluginaffected: 1.3.21CVE List
  • Product Sets Pluginaffected: 1.3.22CVE List
  • Product Sets Pluginaffected: 1.3.23CVE List
  • Product Sets Pluginaffected: 1.3.24CVE List
  • Product Sets Pluginunaffected: 1.3.25CVE List

References 5