← WordPress Vulnerabilities
WordPress security by component

Dynamic AJAX Product Filters for WooCommerce

Dynamic AJAX Product Filters for WooCommerce is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Aug 28, 2025; the highest CVE/CNA score is 6.4.

Plugin slug: dynamic-ajax-product-filters-for-woocommerce

CVE-2025-8073: Dynamic AJAX Product Filters for WooCommerce: Cross-site scripting

Dynamic AJAX Product Filters for WooCommerce is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedAug 28, 2025
Safe version guidanceSee mitigation notes
Safe version
Aug 28, 2025 CVE-2025-8073
Dynamic AJAX Product Filters for WooCommerce: Cross-site scripting
Dynamic AJAX Product Filters for WooCommerce is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVDPending
Aug 28, 2025 CVE-2025-6255
Dynamic AJAX Product Filters for WooCommerce: Cross-site scripting
Dynamic AJAX Product Filters for WooCommerce is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVDPending