Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Ali2Woo vulnerabilities

4 published CVEs name Ali2Woo among the affected products.

Newest CVEs

  • CVE-2024-37210

    WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control vulnerability

    ali2woo · AliNext

    Medium6.5
  • CVE-2024-37212

    WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability

    Ali2Woo · Ali2Woo Lite

    High8.3
  • CVE-2024-2381

    AliExpress Dropshipping with AliNext Lite <= 3.3.5 - Authenticated (Subscriber+) Arbitrary File Upload

    ali2woo · AliExpress Dropshipping Plugin for WooCommerce & WordPress

    High8.8
  • CVE-2024-4450

    AliExpress Dropshipping with AliNext Lite <= 3.3.6 - Missing Authorization via Several Functions

    ali2woo · AliExpress Dropshipping Plugin for WooCommerce & WordPress

    Medium6.3