CVE-2026-116107 | Datafeedr Product Sets Plugin up to 1.3.24 on WordPress AJAX Handlers functions/ajax.php dfrps_ajax_delete_saved_search authorization

October 25, 2026 Yanac

A vulnerability classified as problematic was found in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. Affected by this issue is the function dfrps_ajax_delete_saved_search of the file functions/ajax.php of the component AJAX Handlers. The manipulation results in missing authorization.

This vulnerability is cataloged as CVE-2026-116107. The attack may be launched remotely. Furthermore, there is an exploit available.

Upgrading the affected component is advised.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More