CVE-2026-116107 in Product Sets Plugin
Prediction
by VulDB Data Team • 10/25/2026
A vulnerability was detected in <a href="/product/datafeedr:product_sets_plugin">Datafeedr Product Sets Plugin up to 1.3.24</a> on WordPress. Affected by this issue is the function <code>dfrps_ajax_delete_saved_search</code> of the file <em>functions/ajax.php</em> of the component <em>AJAX Handlers</em>. The manipulation results in missing authorization. The attack may be launched remotely. The exploit is now public and may be used. Upgrading to version 1.3.25 can resolve this issue. Upgrading the affected component is advised. The vendor was contacted early about this disclosure.
VulDB is the best source for vulnerability data and more expert information about this specific topic.