WordPress Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy Plugin <= 2.1.1 is vulnerable to Broken Access Control

Software Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy Type Plugin Vulnerable versions = 2.1.1 Fixed in 2.1.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-49848 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID...

WordPress Widgets for AliExpress Reviews Plugin <= 11.0.2 is vulnerable to Arbitrary File Upload

Software Widgets for AliExpress Reviews Type Plugin Vulnerable versions = 11.0.2 Fixed in 11.1 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-48275 Patch priority Medium CVSS severity Medium 8 Developer Claim ownership PSID 72d5b16197ff Credits Rafie Muhammad...

Sharkdropship for AliExpress Dropship and Affiliate <= 2.2.3 - Missing Authorization

Description The Sharkdropship for AliExpress Dropship and Affiliate plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on several functions called via nopriv AJAX actions in the /wooshark-aliexpress-importerinit.php file in versions...

Wordpress Plugin IRivYou - Add reviews from AliExpress and Amazon to woocommerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Wordpress Plugin IRivYou - Add reviews...

WordPress Sharkdropship for AliExpress Dropship and Affiliate Plugin <= 2.2.3 is vulnerable to Broken Access Control

Software Sharkdropship for AliExpress Dropship and Affiliate Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.2.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-30870 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID...

aliexpress-russia.ru Cross Site Scripting vulnerability OBB-3681179

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce Plugin <= 1.0.21 is vulnerable to Broken Access Control

Software ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce Type Plugin Vulnerable versions = 1.0.21 Fixed in 1.0.22 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-46811 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSI...

CVE-2022-41623

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

Code injection

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

CVE-2022-41623

CVE-2022-41623 affects the WordPress plugin Villatheme ALD – AliExpress Dropshipping and Fulfillment for WooCommerce, version

CVE-2022-41623 WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

WooCommerce AliExpress Dropshipping 安全漏洞

WooCommerce AliExpress Dropshipping is a plugin from WooCommerce Inc. Allows store owners to import products from aliexpress.com into their own WooCommerce store. A security vulnerability exists in WooCommerce AliExpress Dropshipping version 1.1.0 and prior versions that stems from the disclosure...

AliExpress Dropshipping and Fulfilment for WooCommerce < 1.1.1 - Unauthenticated Sensitive Data Exposure

The plugin disclose sensitive information to unauthenticated users via a crafted request...

WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Dave Jong Patchstack in WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin versions = 1.1.0. Solution Update the WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce plugin to the latest...

WordPress plugin ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Judge.me : stored XSS on AliExpress Review Importer/Products when delete product

Hi @judgeme! code Step to reproduce: 1. Go to Shopify admin and create product with name "" img src=x onerror=prompt 2. Go to AliExpress Review Importer/Products and delete our product with name " img src=x onerror=promptdocument.domain F1544890 3. Xss work= P.S. Poc wideo attach F1544893 Impact...

aliexpress-russians.ru XSS vulnerability

Open Bug Bounty ID: OBB-662955 Description| Value ---|--- Affected Website:| aliexpress-russians.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jcwq.aliexpresskorea.com XSS vulnerability

Open Bug Bounty ID: OBB-561513 Description| Value ---|--- Affected Website:| jcwq.aliexpresskorea.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bmuq.aliexpresskorea.com XSS vulnerability

Open Bug Bounty ID: OBB-561504 Description| Value ---|--- Affected Website:| bmuq.aliexpresskorea.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

china-market.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-559119 Description| Value ---|--- Affected Website:| china-market.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...