CVE-2026-66439: WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions.

Affected Software

1 affected component

WordPress Advanced AJAX Product Filters<=3.2.0.3

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Advanced AJAX Product Filters plugin to a version that resolves this vulnerability.
Fixed in 3.2.1

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

CVE-2026-66439 has a severity rating of high with a score of 7.1.

CVE-2026-66439 is classified as a Cross Site Scripting (XSS) vulnerability.

To fix CVE-2026-66439, update the WordPress Advanced AJAX Product Filters plugin to version 3.2.0.4 or later.

All versions of the WordPress Advanced AJAX Product Filters plugin up to and including 3.2.0.3 are affected by CVE-2026-66439.

CVE-2026-66439 allows unauthenticated users to execute malicious scripts in the context of other users' browsers.