The Advanced AJAX Product Filters plugin is vulnerable to PHP Object Injection, which may allow authenticated attackers with Author-level access to execute arbitrary code or delete files if a compatible POP chain is present.

The vulnerability exists due to insecure deserialization of untrusted input within the shortcode_check function. This flaw requires the attacker to have at least Author-level privileges and requires the Live Composer plugin to be installed and active on the target WordPress environment.

The exploitation of this vulnerability could lead to a complete compromise of the affected WordPress site. Depending on the availability of existing POP chains within other installed themes or plugins, an attacker may achieve remote code execution, delete sensitive files, or exfiltrate private data. Given the CVSS score of 8.8, this represents a high-severity risk that could significantly impact organizational operations and data integrity.

Immediate Action: Update the BeRocket Advanced AJAX Product Filters plugin to version 3.1.9.7 or the latest available release immediately. If an update is not currently available, deactivate the plugin or the Live Composer compatibility layer until a patch is applied.

Proactive Monitoring: Review WordPress user access logs for unusual activity originating from Author-level accounts. Monitor server error logs for repeated deserialization errors or suspicious PHP execution patterns.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to detect and block malicious serialized PHP objects. Ensure that the principle of least privilege is enforced by restricting user roles to the minimum level necessary for their job functions.

Public Exploit Available: No (exploit_available unknown)

Organizations utilizing the Advanced AJAX Product Filters plugin must prioritize updating to the latest version to mitigate this risk. Because the vulnerability depends on secondary factors like the presence of additional plugins, administrators should also audit their WordPress environment to remove unused software and reduce the overall attack surface. Apply the security update immediately to ensure the integrity of the web application.