Advisories · Technology

BeRocket Advanced AJAX Product Filters.

Every CVE that names BeRocket Advanced AJAX Product Filters among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66439 CVE record

CVSS 7.1 High

WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability
- BeRocket Advanced AJAX Product Filters
- Cross-site scripting (XSS)
Not analysed yet 6 Aug 2026
CVE-2022-45813 CVE record

CVSS 5.4 Medium

WordPress Advanced AJAX Product Filters plugin <= 1.6.3.3 - Broken Access Control + CSRF
- BeRocket Advanced AJAX Product Filters
- Broken access control
Not analysed yet 11 Jun 2026
CVE-2026-1426 CVE record

CVSS 8.8 High

Advanced AJAX Product Filters <= 3.1.9.6 - Authenticated (Author+) PHP Object Injection via Live Composer Compatibility
- berocket Advanced AJAX Product Filters
- Insecure deserialization
Not analysed yet 18 Feb 2026
CVE-2025-1505 CVE record

CVSS 6.1 Medium

Advanced AJAX Product Filters <= 1.6.8.1 - Reflected Cross-Site Scripting
- berocket Advanced AJAX Product Filters
- Cross-site scripting (XSS)
Not analysed yet 28 Feb 2025