Medium · 4.3 CVE-2022-40128 EUVD-2022-43446GHSA-662h-7f84-69rv

WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability

Published Nov 8, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Algolplus Product: Advanced Order Export For WooCommerce (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file download.

Affected products

Vendor	Product	Affected	Fixed
AlgolPlus	Advanced Order Export For WooCommerce (WordPress plugin)	<= 3.3.2 – ≤ 3.3.2	—

References

https://wordpress.org/plugins/woo-order-export-lite/
https://patchstack.com/database/vulnerability/woo-order-export-lite/wordpress-advanced-order-export-for-woocommerce-plugin-3-3-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve