Login Request a demo
AA
Product
Advanced AJAX Product Filters
by berocket · last CVE Aug 6, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Advanced AJAX Product Filters to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-1426
8.8
1%
Feb 18
Advanced AJAX Product Filters <= 3.1.9.6 - Authenticated (Author+) PHP Object Injection via Live Composer Compatibility
Affected: through 3.1.9.6
CVE-2026-66439
7.1
0%
Aug 6
WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.2.0.3
CVE-2025-1505
6.1
0%
Feb 28
Advanced AJAX Product Filters <= 1.6.8.1 - Reflected Cross-Site Scripting
Affected: through 1.6.8.1
CVE-2021-24432
6.1
0%
Jan 16
The Advanced AJAX Product Filters WordPress plugin does not sanitise the 'term_id' POST parameter before outputting it in the page, leading to reflected Cross-Site Scripting issue
Affected: before 1.5.4.7
CVE-2022-45813
5.4
0%
Jun 11
WordPress Advanced AJAX Product Filters plugin <= 1.6.3.3 - Broken Access Control + CSRF
Affected: through 1.6.3.3
Showing 5