Vulnerabilities > Algolplus
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-13 | CVE-2024-10828 | Deserialization of Untrusted Data vulnerability in Algolplus Advanced Order Export for Woocommerce The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. | 9.8 |
| 2024-01-17 | CVE-2022-40203 | Missing Authorization vulnerability in Algolplus Advanced Dynamic Pricing for Woocommerce Missing Authorization vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce.This issue affects Advanced Dynamic Pricing for WooCommerce: from n/a through 4.1.5. | 8.8 |
| 2022-11-18 | CVE-2022-41655 | Unspecified vulnerability in Algolplus Phone Orders for Woocommerce Auth. | 6.5 |
| 2022-11-09 | CVE-2022-43488 | Cross-Site Request Forgery (CSRF) vulnerability in Algolplus Advanced Dynamic Pricing for Woocommerce Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to rule type migration. | 4.3 |
| 2022-11-08 | CVE-2022-40128 | Cross-Site Request Forgery (CSRF) vulnerability in Algolplus Advanced Order Export for Woocommerce Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file download. | 6.5 |
| 2022-11-08 | CVE-2022-43491 | Cross-Site Request Forgery (CSRF) vulnerability in Algolplus Advanced Dynamic Pricing for Woocommerce Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to plugin settings import. | 4.3 |
| 2022-09-23 | CVE-2022-38095 | Cross-Site Request Forgery (CSRF) vulnerability in Algolplus Advanced Dynamic Pricing for Woocommerce Cross-Site Request Forgery (CSRF) vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 at WordPress. | 4.3 |
| 2022-09-09 | CVE-2022-35275 | Cross-site Scripting vulnerability in Algolplus Advanced Order Export for Woocommerce Authenticated (shop manager+) Reflected Cross-Site Scripting (XSS) vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin <= 3.3.1 at WordPress. | 4.8 |
| 2021-04-05 | CVE-2021-24169 | Cross-site Scripting vulnerability in Algolplus Advanced Order Export for Woocommerce This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. | 6.1 |
| 2021-03-31 | CVE-2021-27349 | Cross-site Scripting vulnerability in Algolplus Advanced Order Export for Woocommerce Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727. | 6.1 |