CVE WATCH / VULNERABILITY DETAIL
CVE-2026-116107
MEDIUMCVSS 5.4NVD feed
Published 26 October 2026 · tracked since 26 October 2026
Description
A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. Affected by this issue is the function dfrps_ajax_delete_saved_search of the file functions/ajax.php of the component AJAX Handlers. The manipulation results in missing authorization. The attack may be launched
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-116113 MEDIUM 6.3
- CVE-2026-116110 HIGH 7.3
- CVE-2026-116112 HIGH 7.3
- CVE-2026-116105 LOW 3.7
- CVE-2026-116106 HIGH 7.3
- CVE-2026-116100 LOW 2.4
- CVE-2026-116101 MEDIUM 6.3
- CVE-2026-116102 MEDIUM 6.3
- CVE-2026-116103 MEDIUM 6.3
- CVE-2026-116104 MEDIUM 6.3