blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2026-116107

LOW 2.1 CVSS 4.0
Published
October 26, 2026
Last modified
November 2, 2026
NVD status
Deferred
Reported by
cna@vuldb.com
Weakness
CWE-862, CWE-863
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Description

A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. Affected by this issue is the function dfrps_ajax_delete_saved_search of the file functions/ajax.php of the component AJAX Handlers. The manipulation results in missing authorization. The attack may be launched remotely. The exploit is now public and may be used. Upgrading to version 1.3.25 can resolve this issue. Upgrading the affected component is advised. The vendor was contacted early about this disclosure.

Affected WordPress components

  • Datafeedr Product Sets Plugin · datafeedr-product-sets
    Confirmed match Active
    Version 1.3.0; Version 1.3.11; Version 1.3.12; Version 1.3.13; Version 1.3.14; Version 1.3.15; Version 1.3.16; Version 1.3.17; Version 1.3.18; Version 1.3.19; Version 1.3.20; Version 1.3.21; Version 1.3.22; Version 1.3.23; Version 1.3.24; Version 1.3.25; Version 1.3.2; Version 1.3.3; Version 1.3.4; Version 1.3.5; Version 1.3.6; Version 1.3.7; Version 1.3.8; Version 1.3.1; Version 1.3.9; Version 1.3.10
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • Datafeedr Product Sets Plugin — Version 1.3.0
  • Datafeedr Product Sets Plugin — Version 1.3.1
  • Datafeedr Product Sets Plugin — Version 1.3.2
  • Datafeedr Product Sets Plugin — Version 1.3.3
  • Datafeedr Product Sets Plugin — Version 1.3.4
  • Datafeedr Product Sets Plugin — Version 1.3.5
  • Datafeedr Product Sets Plugin — Version 1.3.6
  • Datafeedr Product Sets Plugin — Version 1.3.7
  • Datafeedr Product Sets Plugin — Version 1.3.8
  • Datafeedr Product Sets Plugin — Version 1.3.9
  • Datafeedr Product Sets Plugin — Version 1.3.10
  • Datafeedr Product Sets Plugin — Version 1.3.11
  • Datafeedr Product Sets Plugin — Version 1.3.12
  • Datafeedr Product Sets Plugin — Version 1.3.13
  • Datafeedr Product Sets Plugin — Version 1.3.14
  • Datafeedr Product Sets Plugin — Version 1.3.15
  • Datafeedr Product Sets Plugin — Version 1.3.16
  • Datafeedr Product Sets Plugin — Version 1.3.17
  • Datafeedr Product Sets Plugin — Version 1.3.18
  • Datafeedr Product Sets Plugin — Version 1.3.19
  • Datafeedr Product Sets Plugin — Version 1.3.20
  • Datafeedr Product Sets Plugin — Version 1.3.21
  • Datafeedr Product Sets Plugin — Version 1.3.22
  • Datafeedr Product Sets Plugin — Version 1.3.23
  • Datafeedr Product Sets Plugin — Version 1.3.24

References