Medium · 6.5 CVE-2023-30870 EUVD-2023-35210GHSA-phj2-cgmx-vr7v

WordPress Sharkdropship for AliExpress Dropship and Affiliate plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities

Published Dec 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Woo product importer Product: Sharkdropship for AliExpress Dropship and Affiliate

Description

Missing Authorization vulnerability in wooproductimporter Sharkdropship for AliExpress Dropship and Affiliate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sharkdropship for AliExpress Dropship and Affiliate: from n/a through 2.2.3.

Affected products

Vendor	Product	Affected	Fixed
wooproductimporter	Sharkdropship for AliExpress Dropship and Affiliate	≤ 2.2.3	—

References

https://patchstack.com/database/wordpress/plugin/wooshark-aliexpress-importer/vulnerability/wordpress-sharkdropship-for-aliexpress-dropship-and-affiliate-plugin-2-2-3-multiple-broken-access-control-vulnerabilities?_s_id=cve vdb-entry