TI-2026-80240 CVE-2026-116107 · GHSA-5r9h-jfp8-wfxv
Missing authorization in Datafeedr Product Sets Plugin AJAX handler
Priority MEDIUM 57
A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress.
Vulnerabilities
4 records
TI-2025-18364 CVE-2025-24647 · GHSA-m7x4-vmph-gfvr
WordPress WooCommerce Cloak Affiliate Links plugin <= 1.0.35 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 24
Cross-Site Request Forgery (CSRF) vulnerability in datafeedr WooCommerce Cloak Affiliate Links woocommerce-cloak-affiliate-links allows Cross Site Request Forgery.This issue affects WooCommerce Cloak Affiliate Links: fro…
TI-2023-26828 CVE-2023-49169 · GHSA-vgq8-wrpg-ch5m
WordPress Ads by datafeedr.com Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in datafeedr.Com Ads by datafeedr.Com allows Stored XSS.This issue affects Ads by datafeedr.Com: from n/a through 1.2.0.
TI-2023-05379 CVE-2023-5843 · GHSA-97wj-4q63-7pp6
Ads by datafeedr.com <= 1.1.3 - Unauthenticated (Limited) Remote Code Execution
Priority MEDIUM 48
The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_ajax_load_ads' function.