CVE-2026-116107
5.4 MEDIUMPublished 2026-10-26 · Updated 2026-10-26
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. Affected by this issue is the function dfrps_ajax_delete_saved_search of the file functions/ajax.php of the component AJAX Handlers. The manipulation results in missing authorization. The attack may be launched remotely. The exploit is now public and may be used. Upgrading to version 1.3.25 can resolve this issue. Upgrading the affected component is advised. The vendor was contacted early about this disclosure.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Weaknesses
CWE-862, CWE-863
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100744PoC
- MEDIUMCVE-2026-100879PoC
- CRITICALCVE-2026-101000PoC
- LOWCVE-2026-101139PoC
- HIGHCVE-2026-102249PoC
- UNSCOREDCVE-2026-103091PoC
- MEDIUMCVE-2026-104054PoC
- CRITICALCVE-2026-106511PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.