WordPress Plugin Vulnerabilities

Advanced AJAX Product Filters < 1.3.7 - Unauthenticated Plugin Settings Update

Description

The Advanced AJAX Product Filters WordPress plugin was affected by an Unauthenticated Plugin Settings Update security vulnerability.

Affects Plugins

Plugin icon
woocommerce-ajax-filters
Fixed in 1.3.7

References

URL
https://labs.sucuri.net/unauthenticated-settings-update-in-woocommerce-ajax-filters/

Classification

Type
PRIVESC
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-269

Miscellaneous

Verified
No
WPVDB ID
c5efdac5-06ac-4baa-8c2f-0dd7e6dc1050

Timeline

Publicly Published
2019-09-18 (about 6 years ago)
Added
2019-09-18 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2024-09-17
Title
Webo-facto < 1.41 - Unauthenticated Privilege Escalation
Published
2025-08-18
Title
Real Spaces - WordPress Properties Directory Theme < 3.6.1 - Unauthenticated Privilege Escalation to Administrator via 'imic_agent_register'
Published
2017-08-01
Title
WP Support Plus Responsive Ticket System < 8.0.0 - Privilege Escalation
Published
2025-03-07
Title
Post Meta Data Manager <= 1.4.4 - Authentciated (Admin+) Multisite Privilege Escalation
Published
2023-06-19
Title
MStore API < 3.9.9 - Unauthenticated Privilege Escalation