Medium · 6.5 CVE-2024-37210 EUVD-2024-55637GHSA-xf32-v42j-x7mg

WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control vulnerability

Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in ali2woo AliNext allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects AliNext: from n/a through 3.3.5.

Vendor	Product	Affected	Fixed
ali2woo	AliNext	≤ 3.3.5	—