PatchSiren

BeRocket CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH BeRocket CVE published 2026-08-06

CVE-2026-66439

CVE-2026-66439 is an unauthenticated Cross Site Scripting (XSS) vulnerability in Advanced AJAX Product Filters <= 3.2.0.3 versions. The vulnerability has a CVSS score of 7.1 and is classified as HIGH severity. The CVE record indicates that the vulnerability was published on 2026-08-06T15:17:19.937Z and has not been modified since then. Defenders and administrators of systems using Advanced AJAX Product Fi [truncated]

MEDIUM BeRocket CVE published 2026-06-11

CVE-2022-45813

A Missing Authorization vulnerability in BeRocket Advanced AJAX Product Filters allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced AJAX Product Filters: from n/a through 1.6.3.3. The vulnerability could lead to unauthorized access and disruption of e-commerce operations. Defenders and administrators of e-commerce platforms using BeRocket Advanced AJAX Prod [truncated]