WordPress plugin ALD Login Page 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-15784 · Unknown · Hossainawlad Ald Login Page

Name of the Vulnerable Software and Affected Versions: hossainawlad ALD Login Page versions n/a through 1.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in the hossainawlad ALD Login Page. Recommendations: For versions n/a throug...

CVE-2025-32518: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in hossainawlad ALD Login Page ald-login-page allows Stored XSS.This issue affects ALD Login Page: from n/a through = 1.1...

CVE-2022-46811

Missing Authorization vulnerability in VillaThemevillatheme.com ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce: from n/a...

CVE-2022-46811

CVE-2022-46811 affects the WordPress plugin ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce (VillaTheme) up to version 1.0.21. The root cause is Missing Authorization / Access Control allowing broken access control and CSRF-related issues. The CVSSv3.1 base score is 4.3 (Medium)...

PT-2024-11740

Name of the Vulnerable Software and Affected Versions ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce versions 1.0.21 and earlier Description The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured access control...

CVE-2022-46811: Missing Authorization

Missing Authorization vulnerability in VillaThemevillatheme.com ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce: from n/a...

WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce Plugin <= 1.0.21 is vulnerable to Broken Access Control

Software ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce Type Plugin Vulnerable versions = 1.0.21 Fixed in 1.0.22 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-46811 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSI...

CVE-2022-41623

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

Code injection

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

CVE-2022-41623 WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

CVE-2022-41623

CVE-2022-41623 affects the WordPress plugin Villatheme ALD – AliExpress Dropshipping and Fulfillment for WooCommerce, version

PT-2022-25990 · WordPress · Villatheme Ald - Aliexpress Dropshipping/Fulfillment For Woocommerce

Name of the Vulnerable Software and Affected Versions: Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin version 1.1.0 and earlier Description: The issue concerns sensitive data exposure. The estimated number of potentially affected devices worldwide is not...

CVE-2022-41623: Exposure of Sensitive Information Through Data Queries

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Dave Jong Patchstack in WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin versions = 1.1.0. Solution Update the WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce plugin to the latest...

WordPress plugin ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2020-22846

Уязвимость системы управления ЕПП службы Astra Linux Directory ALD связана с проблемой множественного запуска программного обеспечения. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании...

PT-2020-22852

Уязвимость системы управления ЕПП службы Astra Linux Directory ALD связана с ошибкой авторизации для локального пользователя. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании...

PT-2020-22847

Уязвимость системы управления ЕПП службы Astra Linux Directory ALD связана с ошибкой выходом операции за границы памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслужива...

PT-2020-22848

Уязвимость системы управления ЕПП службы Astra Linux Directory ALD связана с ошибкой выставления целостности каталогов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживан...