VendorsAlgolplusadvanced_order_export_for_woocommerceall versions
Vulnerabilities

Algolplus Advanced Order Export for WooCommerce

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2024-10828
Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details
Published 2024-11-13 · Analyzed
9.8EPSS 0.015
CVE-2018-11525
The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.
Published 2018-06-19 · Modified
7.81 PoCEPSS 0.051
CVE-2022-40128
WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability
Published 2022-11-08 · Modified
6.5EPSS 0.003
CVE-2021-24169
Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)
Published 2021-04-05 · Modified
6.11 PoCEPSS 0.103
CVE-2020-11727
A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the view/settings-form.php woe_post_type parameter.
Published 2020-05-06 · Modified
6.1EPSS 0.020
CVE-2021-27349
Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.
Published 2021-03-31 · Modified
6.1EPSS 0.008
CVE-2022-35275
WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Published 2022-09-09 · Modified
4.8EPSS 0.005