Medium · 5.4 CVE-2022-45813 EUVD-2022-56005GHSA-gpfg-4c47-2cxm

WordPress Advanced AJAX Product Filters plugin <= 1.6.3.3 - Broken Access Control + CSRF

Published Jun 11, 2026 · Updated Jun 11, 2026 · Assigned by Patchstack

Vendor: BeRocket Product: Advanced AJAX Product Filters

Description

Missing Authorization vulnerability in BeRocket Advanced AJAX Product Filters allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Advanced AJAX Product Filters: from n/a through 1.6.3.3.

Affected products

Vendor	Product	Affected	Fixed
BeRocket	Advanced AJAX Product Filters	≤ 1.6.3.3	—

References

https://patchstack.com/database/wordpress/plugin/woocommerce-ajax-filters/vulnerability/wordpress-advanced-ajax-product-filters-plugin-1-6-3-3-broken-access-control-csrf?_s_id=cve vdb-entry