High · 7.1 CVE-2024-37213 EUVD-2024-36502GHSA-63q2-hp23-jpgh

WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.4.6 - CSRF to XSS vulnerability

Published Jul 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: guru-aliexpress Product: AliNext

Description

Cross-Site Request Forgery (CSRF) vulnerability in guru-aliexpress AliNext ali2woo-lite allows Cross Site Request Forgery.This issue affects AliNext: from n/a through <= 3.4.6.

Affected products

Vendor	Product	Affected	Fixed
guru-aliexpress	AliNext	≤ 3.4.6	—

References

https://patchstack.com/database/Wordpress/Plugin/ali2woo-lite/vulnerability/wordpress-aliexpress-dropshipping-with-alinext-lite-plugin-3-3-5-csrf-to-xss-vulnerability?_s_id=cve vdb-entry