WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce Plugin <= 1.0.21 is vulnerable to Broken Access Control

Software ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce Type Plugin Vulnerable versions = 1.0.21 Fixed in 1.0.22 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-46811 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSI...

CVE-2022-41623

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

Code injection

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

CVE-2022-41623

CVE-2022-41623 affects the WordPress plugin Villatheme ALD – AliExpress Dropshipping and Fulfillment for WooCommerce, version

CVE-2022-41623 WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

CVE-2022-41623: Exposure of Sensitive Information Through Data Queries

Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin = 1.1.0 on WordPress...

WooCommerce AliExpress Dropshipping 安全漏洞

WooCommerce AliExpress Dropshipping is a plugin from WooCommerce Inc. Allows store owners to import products from aliexpress.com into their own WooCommerce store. A security vulnerability exists in WooCommerce AliExpress Dropshipping version 1.1.0 and prior versions that stems from the disclosure...

AliExpress Dropshipping and Fulfilment for WooCommerce < 1.1.1 - Unauthenticated Sensitive Data Exposure

The plugin disclose sensitive information to unauthenticated users via a crafted request...

WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Dave Jong Patchstack in WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin versions = 1.1.0. Solution Update the WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce plugin to the latest...

WordPress plugin ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Judge.me : stored XSS on AliExpress Review Importer/Products when delete product

Hi @judgeme! code Step to reproduce: 1. Go to Shopify admin and create product with name "" img src=x onerror=prompt 2. Go to AliExpress Review Importer/Products and delete our product with name " img src=x onerror=promptdocument.domain F1544890 3. Xss work= P.S. Poc wideo attach F1544893 Impact...

aliexpress-russians.ru XSS vulnerability

Open Bug Bounty ID: OBB-662955 Description| Value ---|--- Affected Website:| aliexpress-russians.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jcwq.aliexpresskorea.com XSS vulnerability

Open Bug Bounty ID: OBB-561513 Description| Value ---|--- Affected Website:| jcwq.aliexpresskorea.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bmuq.aliexpresskorea.com XSS vulnerability

Open Bug Bounty ID: OBB-561504 Description| Value ---|--- Affected Website:| bmuq.aliexpresskorea.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

china-market.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-559119 Description| Value ---|--- Affected Website:| china-market.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

m.aliexpresskorea.com XSS vulnerability

Open Bug Bounty ID: OBB-478657 Description| Value ---|--- Affected Website:| m.aliexpresskorea.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

login.aliexpress.com Open Redirect vulnerability

Vulnerable URL: https://login.aliexpress.com/xman/xlogout.htm?returnurl=http://f01.s.alicdn.com/kf/HTB1R1OTb7fbuJjSsD4OxiqiFXaB.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed...

AliExpress Shopping App - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AliExpress Shopping App published at the 'play' market has multiple vulnerabilities...

Alibaba Cross Site Scripting / Open Redirect

Alibaba Taobao, AliExpress, Tmall, Online Electronic Shopping Website XSS & Open Redirect Security Vulnerabilities Domains Basic: Alibaba Taobao, AliExpress, Tmall are the top three online shopping websites belonging to Alibaba. Vulnerability Discover: Wang Jing, Division of Mathematical Sciences...

Alibaba Marketplace Vulnerability Puts Millions Of Shoppers at Risk

Alibaba Group has patched a major security vulnerability in one of its e-commerce portals that exposed account details of tens of millions of Merchants and shoppers to cyber criminals. An Israeli application security firm, AppSec Labs, found a Cross site scripting XSS vulnerability in AliExpress,...