Skip to content
OpenAdvisories

Vendor

Ali2Woo

4 known vulnerabilities.

Products

AliExpress Dropshipping Plugin for WooCommerce & WordPress 2 Ali2Woo Lite 1 AliNext 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2024-37212

    WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5.

    Ali2Woo Ali2Woo Lite
  • High 8.8
    CVE-2024-2381

    AliExpress Dropshipping with AliNext Lite <= 3.3.5 - Authenticated (Subscriber+) Arbitrary File Upload

    The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_save_image function in all versions up to, and including, 3.3.5. This makes it possible for authenticate…

    Ali2Woo AliExpress Dropshipping Plugin for WooCommerce & WordPress Web / CMS