Skip to content
OpenAdvisories

Vendor

Ali2Woo

4 known vulnerabilities.

Products

AliExpress Dropshipping Plugin for WooCommerce & WordPress 2 Ali2Woo Lite 1 AliNext 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-37210

    WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ali2woo AliNext allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AliNext: from n/a through 3.3.5.

    Ali2Woo AliNext
  • Medium 6.3
    CVE-2024-4450

    AliExpress Dropshipping with AliNext Lite <= 3.3.6 - Missing Authorization via Several Functions

    The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the ImportAjaxController.php file in all versions up to, and including, 3.3.6. This makes it poss…

    Ali2Woo AliExpress Dropshipping Plugin for WooCommerce & WordPress Web / CMS