Datafeedr CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW Datafeedr CVE published 2026-10-26

CVE-2026-116107

A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. The issue is related to the function dfrps_ajax_delete_saved_search in the file functions/ajax.php, which lacks authorization. This vulnerability can be exploited remotely. The exploit is now public and may be used. Upgrading to version 1.3.25 can resolve this issue.