Ali2woo Aliexpress Dropshipping With Alinext
4 CVEs affecting Ali2woo Aliexpress Dropshipping With Alinext. Latest disclosed: 2024-07-22. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-2381 | High | 8.8 | 2024-06-19 | The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_save… |
CVE-2024-37212 | High | 8.3 | 2024-06-21 | Cross-Site Request Forgery (CSRF) vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5. |
CVE-2024-37211 | High | 7.1 | 2024-07-22 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ali2Woo Team Ali2Woo Lite allows Reflected XSS.Thi… |
CVE-2024-4450 | Medium | 6.3 | 2024-06-19 | The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions… |