Skip to content
OpenAdvisories

Product · Algolplus

Advanced Order Export For WooCommerce

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.9

    Advanced Order Export For WooCommerce <= 4.0.10 - Authenticated (Shop Manager+) SQL Injection via 'sort_direction' Parameter

    The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_direction' parameter in all versions up to, and including, 4.0.10 due to insufficient escaping on the user supplied parameter and lack of suffi…