Lucene search
K

34 matches found

NVD
NVD
added yesterday2 views

CVE-2024-37210

Missing Authorization vulnerability in ali2woo AliNext allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AliNext: from n/a through 3.3.5...

6.5CVSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-36501

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.0021EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-36500

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00256EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-36502

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.00168EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-36503

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.0025EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.2 views

WordPress plugin ali2woo AliNext 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...

4.7CVSS8.5AI score0.00367EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 12:53 a.m.6 views

CVE-2024-37212

Cross-Site Request Forgery CSRF vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

8.8CVSS7AI score0.0021EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:43 a.m.5 views

CVE-2024-37211

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ali2Woo Team Ali2Woo Lite allows Reflected XSS.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

7.1CVSS6.9AI score0.00256EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/05 12:37 a.m.4 views

CVE-2024-37213

Cross-Site Request Forgery CSRF vulnerability in guru-aliexpress AliNext ali2woo-lite allows Cross Site Request Forgery.This issue affects AliNext: from n/a through = 3.4.6...

7.1CVSS5.9AI score0.00168EPSS
Exploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.10 views

CVE-2024-37214

Missing Authorization vulnerability in Dropshipping Guru Ali2Woo Lite Exploiting Incorrectly Configured Access Control Security Levels, Stored XSS.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

6.5CVSS0.0025EPSS
Exploits0References1
CVE
CVE
added 2024/11/01 2:18 p.m.49 views

CVE-2024-37214

CVE-2024-37214 affects WordPress plugin AliExpress Dropshipping with AliNext Lite (Ali2Woo Lite) ≤ 3.3.5. Reported as Missing Authorization with Stored XSS due to incorrectly configured access control. PTSecurity recommends updating to a version later than 3.3.5; Wordfence and PatchStack notes co...

6.5CVSS6.4AI score0.0025EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/01 2:18 p.m.21 views

CVE-2024-37214 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control to XSS vulnerability

Missing Authorization vulnerability in Dropshipping Guru Ali2Woo Lite Exploiting Incorrectly Configured Access Control Security Levels, Stored XSS.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

6.5CVSS0.0025EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:18 p.m.11 views

CVE-2024-37214 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control to XSS vulnerability

Missing Authorization vulnerability in Dropshipping Guru Ali2Woo Lite Exploiting Incorrectly Configured Access Control Security Levels, Stored XSS.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

6.5CVSS6.7AI score0.0025EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.4 views

WordPress plugin Ali2Woo Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.6AI score0.0025EPSS
Exploits0References1
OSV
OSV
added 2024/07/22 10:15 a.m.2 views

CVE-2024-37211

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ali2Woo Team Ali2Woo Lite allows Reflected XSS.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

6.1CVSS5.8AI score0.00256EPSS
Exploits0References1
NVD
NVD
added 2024/07/22 10:15 a.m.15 views

CVE-2024-37211

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ali2Woo Team Ali2Woo Lite allows Reflected XSS.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

7.1CVSS0.00256EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/22 9:30 a.m.26 views

CVE-2024-37211 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ali2Woo Team Ali2Woo Lite allows Reflected XSS.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

7.1CVSS0.00256EPSS
Exploits0References1
CVE
CVE
added 2024/07/22 9:30 a.m.43 views

CVE-2024-37211

CVE-2024-37211 is an XSS vulnerability described as Reflected Cross-Site Scripting in the WordPress plugin AliExpress Dropshipping with AliNext Lite (Ali2Woo Lite). Affected: Ali2Woo Lite up to version 3.3.5 (no detail on fixed version). The issue arises from Improper Neutralization of Input Duri...

7.1CVSS7AI score0.00256EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/07/12 2:15 p.m.15 views

CVE-2024-37213

Cross-Site Request Forgery CSRF vulnerability in guru-aliexpress AliNext ali2woo-lite allows Cross Site Request Forgery.This issue affects AliNext: from n/a through = 3.4.6...

7.1CVSS0.00168EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/07/12 1:27 p.m.23 views

CVE-2024-37213 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.4.6 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in guru-aliexpress AliNext ali2woo-lite allows Cross Site Request Forgery.This issue affects AliNext: from n/a through = 3.4.6...

7.1CVSS0.00168EPSS
Exploits0References1
Rows per page
Query Builder