Extension WordPress
Vulnérabilités Advanced AJAX Product Filters
Cette page rassemble les failles publiées pour Advanced AJAX Product Filters, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Advanced AJAX Product Filters
4 fiches
Advanced AJAX Product Filters <= 3.1.9.6 – Authenticated (Author+) PHP Object Injection via Live Composer Compatibility
The Advanced AJAX Product Filters plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.9.6 via deserialization of untrusted input in the shortcode_check function within the Live Composer compatibility layer. This…
*-3.1.9.6
3.1.9.7
17/02/2026
Advanced AJAX Product Filters <= 1.6.8.1 – Reflected Cross-Site Scripting
The Advanced AJAX Product Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and including, 1.6.8.1 due to insufficient input sanitization and output escaping. This makes it possible…
*-1.6.8.1
1.6.8.2
27/02/2025
Advanced AJAX Product Filters <= 1.5.4.6 – Reflected Cross-Site Scripting
The Advanced AJAX Product Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘term_id’ parameter in versions up to, and including, 1.5.4.6 due to insufficient input sanitization and output escaping. This makes it possible for…
*-1.5.4.6
1.5.4.7
09/06/2021
WooCommerce AJAX Product Filters <= 1.3.6 – Arbitrary Settings Update
The WooCommerce AJAX Product Filters plugin for WordPress is vulnerable to Arbitrary Settings Update in versions up to, and including, 1.3.6. This is due to incorrect usage of the admin_init hook. This makes it possible for unauthenticated attackers…
[*, 1.3.7)
1.3.7
18/09/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.