Vendor archive

ali2woo CVEs

Beta · best-effort

4 CVEs tagged to vendor ali2woo — 0 Critical, 3 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2024-37211

Published Jul 22, 2024

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ali2Woo Team Ali2Woo Lite allows Reflected XSS.This issue affects Ali2…

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

CVE-2024-37212

Published Jun 21, 2024

Cross-Site Request Forgery (CSRF) vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5.

CVSS 8.3 · High

Vendor/product tagsBeta · best-effort

CVE-2024-4450

Published Jun 19, 2024

The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the ImportAjaxCon…

CVSS 6.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2024-2381

Published Jun 19, 2024

The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_save_image function in a…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1