CVE-2024-37213

CVE-2024-37213 is described as a CSRF to XSS vulnerability in the WordPress plugin Ali2Woo Lite, affecting Ali2Woo Lite versions up to 3.3.9. The connected sources confirm the issue type and affected version range but do not provide a public fix version or detailed root-cause exploitation steps w...

WordPress plugin Ali2Woo Lite Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2024-27381 · Unknown · Ali2Woo Lite

Name of the Vulnerable Software and Affected Versions: Ali2Woo Lite versions 3.3.9 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Cross-Site Scripting XSS. Recommendations: For Ali2Woo Lite versions 3.3.9 and earlier, update to a...

CVE-2024-37212

Cross-Site Request Forgery CSRF vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

CVE-2024-37212

Cross-Site Request Forgery CSRF vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

CVE-2024-37212 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

CVE-2024-37212

CVE-2024-37212: CSRF to PHP Object Injection in Ali2Woo Lite (WordPress plugin) affects Ali2Woo Lite up to version 3.3.5. The entry notes no public exploitation details in the connected docs, and exploitation status is listed as null. CVSSv3.1 vectors indicate network access required, no privileg...

CVE-2024-37212 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ali2Woo Ali2Woo Lite.This issue affects Ali2Woo Lite: from n/a through 3.3.5...

WordPress plugin Ali2Woo Lite Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress Ali2Woo Lite Plugin <= 3.4.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ali2Woo Lite Type Plugin Vulnerable versions = 3.4.7 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37213 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 1377af0c8513 Credits Majed Refaea Required...

WordPress Ali2Woo Lite Plugin <= 3.4.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Ali2Woo Lite Type Plugin Vulnerable versions = 3.4.3 Fixed in 3.4.4 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37212 Patch priority Low CVSS severity Low 8.3 Developer Claim ownership PSID 02ba3348679b Credits Majed Refaea Required...

WordPress Ali2Woo Lite Plugin <= 3.3.5 is vulnerable to Broken Access Control

Software Ali2Woo Lite Type Plugin Vulnerable versions = 3.3.5 Fixed in 3.3.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37210 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 02abd7b980c0 Credits Majed Refaea Required...

WordPress Ali2Woo Lite Plugin <= 3.3.5 is vulnerable to Cross Site Scripting (XSS)

Software Ali2Woo Lite Type Plugin Vulnerable versions = 3.3.5 Fixed in 3.3.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37211 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e361f4846097 Credits Majed Refaea Required privilege...

WordPress Ali2Woo Lite Plugin <= 3.3.5 is vulnerable to Cross Site Scripting (XSS)

Software Ali2Woo Lite Type Plugin Vulnerable versions = 3.3.5 Fixed in 3.3.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37214 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6c5e8ef725e0 Credits Majed Refaea Required privilege...