Lucene search

Advanced Order Export Security Vulnerabilities

cve

CVE-2018-11525

The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.

7.8CVSS

7.5AI Score

0.002EPSS

2018-06-19 07:29 PM

cve

CVE-2020-11727

A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the view/settings-form.php woe_post_type parameter.

6.1CVSS

5.9AI Score

0.002EPSS

2020-05-06 06:15 PM

cve

CVE-2021-24169

This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS.

6.1CVSS

6AI Score

0.002EPSS

2021-04-05 07:15 PM

cve

CVE-2021-27349

Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.

6.1CVSS

6.1AI Score

0.002EPSS

2021-03-31 10:15 PM

cve

CVE-2022-35275

Authenticated (shop manager+) Reflected Cross-Site Scripting (XSS) vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin <= 3.3.1 at WordPress.

4.8CVSS

4.9AI Score

0.001EPSS

2022-09-09 03:15 PM

cve

CVE-2022-40128

Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file download.

6.5CVSS

6.5AI Score

0.001EPSS

2022-11-08 07:15 PM