Critical · 9.1 CVE-2024-31266 EUVD-2024-29162GHSA-8jgr-ff55-g385

WordPress Advanced Order Export For WooCommerce plugin <= 3.4.4 - Remote Code Execution (RCE) vulnerability

Published Apr 25, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Algolplus Product: Advanced Order Export For WooCommerce Category: Web / CMS

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in AlgolPlus Advanced Order Export For WooCommerce allows Code Injection.This issue affects Advanced Order Export For WooCommerce: from n/a through 3.4.4.

Affected products

Vendor	Product	Affected	Fixed
AlgolPlus	Advanced Order Export For WooCommerce	≤ 3.4.4	—

References

https://patchstack.com/database/vulnerability/woo-order-export-lite/wordpress-advanced-order-export-for-woocommerce-plugin-3-4-4-remote-code-execution-vulnerability?_s_id=cve vdb-entry