BeRocket CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH BeRocket CVE published 2026-08-06

CVE-2026-66439

CVE-2026-66439 is an unauthenticated Cross Site Scripting (XSS) vulnerability in Advanced AJAX Product Filters <= 3.2.0.3 versions. The vulnerability has a CVSS score of 7.1 and is classified as HIGH severity. The CVE record indicates that the vulnerability was published on 2026-08-06T15:17:19.937Z and has not been modified since then. Defenders and administrators of systems using Advanced AJAX Product Fi [truncated]

MEDIUM BeRocket CVE published 2026-06-11

CVE-2022-45813

CVE-2022-45813 is a MEDIUM severity vulnerability in Advanced AJAX Product Filters, a WordPress plugin. The vulnerability allows for Exploiting Incorrectly Configured Access Control Security Levels due to a Missing Authorization issue. This issue affects Advanced AJAX Product Filters versions from n/a through 1.6.3.3.