Algolplus Advanced Order Export For Woocommerce — known CVE vulnerabilities

Every CVE whose affected-product data names Algolplus Advanced Order Export For Woocommerce, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2024-10828 — CVSS 8.1 (high): The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including…
• CVE-2018-11525 — CVSS 7.8 (high): The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.
• CVE-2021-24169 — CVSS 6.1 (medium): This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab…
• CVE-2021-27349 — CVSS 6.1 (medium): Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.
• CVE-2020-11727 — CVSS 6.1 (medium): A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote…
• CVE-2022-35275 — CVSS 4.8 (medium): Authenticated (shop manager+) Reflected Cross-Site Scripting (XSS) vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin…
• CVE-2022-40128 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export…