Algolplus Advanced Order Export For WooCommerce (WordPress plugin) vulnerabilities

Latest Algolplus Advanced Order Export For WooCommerce (WordPress plugin) CVEs

Newest publication first

1. CVE-2022-40128 WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability

   Published 2022-11-08

   Medium·CVSS 6.5 EPSS 0.43%

   Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file download.

2. CVE-2022-35275 WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

   Published 2022-09-09

   Medium·CVSS 4.8 EPSS 0.56%

   Authenticated (shop manager+) Reflected Cross-Site Scripting (XSS) vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin <= 3.3.1 at WordPress.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.