TI-2026-80240 CVE-2026-116107 · GHSA-5r9h-jfp8-wfxv
Missing authorization in Datafeedr Product Sets Plugin AJAX handler
Priority MEDIUM 57
A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress.
Datafeedr
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Datafeedr records in CISA KEVNo Datafeedr vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2023-05379 CVE-2023-5843 · GHSA-97wj-4q63-7pp6
Ads by datafeedr.com <= 1.1.3 - Unauthenticated (Limited) Remote Code Execution
Priority MEDIUM 48
The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_ajax_load_ads' function.
TI-2023-26828 CVE-2023-49169 · GHSA-vgq8-wrpg-ch5m
WordPress Ads by datafeedr.com Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in datafeedr.Com Ads by datafeedr.Com allows Stored XSS.This issue affects Ads by datafeedr.Com: from n/a through 1.2.0.
TI-2025-18364 CVE-2025-24647 · GHSA-m7x4-vmph-gfvr
WordPress WooCommerce Cloak Affiliate Links plugin <= 1.0.35 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 24
Cross-Site Request Forgery (CSRF) vulnerability in datafeedr WooCommerce Cloak Affiliate Links woocommerce-cloak-affiliate-links allows Cross Site Request Forgery.This issue affects WooCommerce Cloak Affiliate Links: fro…