Lucene search
K

46 matches found

NVD
NVD
added 5 hours ago3 views

CVE-2026-56042

Customer Cross Site Scripting XSS in Advanced Order Export For WooCommerce = 4.0.9 versions...

7.1CVSS
Exploits0References1
Cvelist
Cvelist
added 6 hours ago3 views

CVE-2026-56042 WordPress Advanced Order Export For WooCommerce plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability

Customer Cross Site Scripting XSS in Advanced Order Export For WooCommerce = 4.0.9 versions...

7.1CVSS
Exploits0References1
CVE
CVE
added 6 hours ago5 views

CVE-2026-56042

The CVE-2026-56042 entry concerns the WordPress plugin “Advanced Order Export For WooCommerce” (WooCommerce) with versions

7.1CVSS5.8AI score
Exploits0References1
EUVD
EUVD
added 6 hours ago3 views

EUVD-2026-39379

Customer Cross Site Scripting XSS in Advanced Order Export For WooCommerce = 4.0.9 versions...

7.1CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2026/06/18 6:16 a.m.9 views

CVE-2026-11360

The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sortdirection' parameter in all versions up to, and including, 4.0.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

4.9CVSS0.00369EPSS
Exploits0References14
CVE
CVE
added 2026/06/18 5:34 a.m.24 views

CVE-2026-11360

The CVE-2026-11360 entry concerns the WordPress plugin Advanced Order Export For WooCommerce (WooCommerce), affected up to version 4.0.10. The vulnerability is a generic SQL Injection via the sort_direction parameter caused by insufficient escaping and inadequate SQL query preparation. Exploitati...

4.9CVSS5.9AI score0.00369EPSS
Exploits0References14
EUVD
EUVD
added 2026/06/18 5:34 a.m.10 views

EUVD-2026-37844

The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sortdirection' parameter in all versions up to, and including, 4.0.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

4.9CVSS5.8AI score0.00369EPSS
Exploits0References14
Cvelist
Cvelist
added 2026/06/18 5:34 a.m.22 views

CVE-2026-11360 Advanced Order Export For WooCommerce <= 4.0.10 - Authenticated (Shop Manager+) SQL Injection via 'sort_direction' Parameter

The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sortdirection' parameter in all versions up to, and including, 4.0.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

4.9CVSS0.00369EPSS
Exploits0References14
Patchstack
Patchstack
added 2026/06/17 4:45 p.m.5 views

WordPress Advanced Order Export For WooCommerce plugin <= 4.0.10 - Authenticated (Shop Manager+) SQL Injection vulnerability

Authenticated Shop Manager+ SQL Injection vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Advanced Order Export For WooCommerce versions = 4.0.10...

4.9CVSS5.9AI score0.00369EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 11:30 a.m.7 views

CVE-2021-27349

Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727...

6.1CVSS6.8AI score0.01955EPSS
Exploits4References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-3554

Malware in sbrugna...

7.8CVSS7.5AI score0.05209EPSS
Exploits6References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-14109

Malware in sbrugna...

6.1CVSS6.3AI score0.00776EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-29162

Malicious code in bioql PyPI...

9.1CVSS8.8AI score0.00691EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-43446

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00313EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 12:25 a.m.13 views

CVE-2024-31266

Improper Control of Generation of Code 'Code Injection' vulnerability in AlgolPlus Advanced Order Export For WooCommerce allows Code Injection.This issue affects Advanced Order Export For WooCommerce: from n/a through 3.4.4...

9.1CVSS8.6AI score0.00691EPSS
Exploits0References1
NVD
NVD
added 2024/11/13 4:15 a.m.13 views

CVE-2024-10828

The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for...

9.8CVSS0.01406EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.3 views

WordPress plugin Advanced Order Export For WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in WordPress...

9.8CVSS8.3AI score0.01406EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/11/12 6:50 p.m.5 views

WordPress Advanced Order Export For WooCommerce plugin <= 3.5.5 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Webbernaut in WordPress Plugin Advanced Order Export For WooCommerce versions = 3.5.5...

9.8CVSS7.3AI score0.01406EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2024/04/25 8:43 a.m.83 views

CVE-2024-31266

CVE-2024-31266 is an authenticated remote code execution vulnerability in the WordPress plugin Advanced Order Export For WooCommerce (

9.1CVSS8.6AI score0.00691EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/04/05 7:59 a.m.2 views

WordPress Advanced Order Export For WooCommerce plugin <= 3.4.4 - Remote Code Execution vulnerability

Remote Code Execution vulnerability discovered by movrment Patchstack Alliance in WordPress Plugin Advanced Order Export For WooCommerce versions = 3.4.4...

9.1CVSS7.5AI score0.00691EPSS
Exploits0Affected Software1
Rows per page
Query Builder