AlgolPlus

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

AlgolPlus records in CISA KEV

No AlgolPlus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Advanced Order Export For Woocommerce 7 records MEDIUM Advanced Dynamic Pricing For Woocommerce 4 records LOW Phone Orders For Woocommerce 1 record LOW

Records

17 records

TI-2024-10037 CVE-2024-10828 · GHSA-6439-mj9p-x34m

Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details

MEDIUM 46

The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01459 Published 2024-11-13 No fix listed CWE-502

TI-2024-20642 CVE-2024-31266 · GHSA-8jgr-ff55-g385

WordPress Advanced Order Export For WooCommerce plugin <= 3.4.4 - Remote Code Execution (RCE) vulnerability

MEDIUM 42

Improper Control of Generation of Code ('Code Injection') vulnerability in AlgolPlus Advanced Order Export For WooCommerce allows Code Injection.This issue affects Advanced Order Export For WooCommerce: from n/a through…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00691 Published 2024-04-25 No fix listed CWE-94

TI-2018-08240 CVE-2018-11525 · GHSA-p8xr-vj9g-9j25

The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.

MEDIUM 42

The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.04962 Published 2018-06-19 No fix listed CWE-1236

TI-2021-06461 CVE-2021-24169 · GHSA-w2gv-7447-6h8c

Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)

MEDIUM 40

This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.10348 Published 2021-04-05 Fixed in 3.1.8 CWE-79

TI-2022-19069 CVE-2022-40203 · GHSA-fgxr-6pwp-cwqx

WordPress Advanced Dynamic Pricing for WooCommerce Plugin <= 4.1.5 is vulnerable to Broken Access Control

LOW 38

Missing Authorization vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce.This issue affects Advanced Dynamic Pricing for WooCommerce: from n/a through 4.1.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00405 Published 2024-01-17 No fix listed CWE-862

TI-2026-40436 CVE-2026-56042 · GHSA-4vjm-ppcq-26j5

WordPress Advanced Order Export For WooCommerce plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability

LOW 31

Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-06-25 No fix listed CWE-79

TI-2025-18349 CVE-2025-24632 · GHSA-3gwv-4x73-6mhr

WordPress Advanced Dynamic Pricing for WooCommerce Plugin <= 4.9.0 -Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in algol.plus Advanced Dynamic Pricing for WooCommerce advanced-dynamic-pricing-for-woocommerce allows Reflected XSS.This…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00266 Published 2025-01-31 No fix listed CWE-79

TI-2020-09417 CVE-2020-11727 · GHSA-6887-rccf-7c23

A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For…

LOW 31

A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the view/settings-form.php w…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01955 Published 2020-05-06 No fix listed CWE-79

TI-2022-20050 CVE-2022-41655 · GHSA-5vjw-v75v-7457

WordPress Phone Orders for WooCommerce plugin <= 3.7.1 - Auth. Sensitive Data Exposure vulnerability

LOW 30

Auth. (subscriber+) Sensitive Data Exposure vulnerability in Phone Orders for WooCommerce plugin <= 3.7.1 on WordPress.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00679 Published 2022-11-18 No fix listed CWE-200

TI-2022-19018 CVE-2022-40128 · GHSA-662h-7f84-69rv

WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 29

Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file download.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00427 Published 2022-11-08 No fix listed CWE-352

TI-2021-08852 CVE-2021-27349 · GHSA-6qrc-68pp-rj6x

Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.

LOW 29

Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00776 Published 2021-03-31 No fix listed CWE-79

TI-2022-21280 CVE-2022-43491 · GHSA-gjhm-vx6v-42c4

WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to plugin settings import.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00362 Published 2022-11-08 No fix listed CWE-352

TI-2022-21278 CVE-2022-43488 · GHSA-j6jg-ww3j-64rf

WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress leading to rule type migration.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00318 Published 2022-11-09 No fix listed CWE-352

TI-2022-17804 CVE-2022-38095 · GHSA-pv83-hp5m-9f24

WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 at WordPress.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00323 Published 2022-09-23 No fix listed CWE-352

TI-2026-09806 CVE-2026-11360 · GHSA-jjw6-h3w9-jfw6

SQL injection in AlgolPlus Advanced Order Export For WooCommerce

LOW 23

The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_direction' parameter in all versions up to, and including, 4.0.10 due to insufficient escaping on the us…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00474 Published 2026-06-18 No fix listed CWE-89

TI-2022-15953 CVE-2022-35275 · GHSA-3h2r-mh7w-gr5w

Cross-site scripting in AlgolPlus Advanced Order Export For WooCommerce

LOW 23

Authenticated (shop manager+) Reflected Cross-Site Scripting (XSS) vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin <= 3.3.1 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00562 Published 2022-09-09 No fix listed CWE-79

TI-2025-26195 CVE-2025-39453 · GHSA-xv93-h5pv-3mpg

Cross-site request forgery in AlgolPlus Advanced Dynamic Pricing for WooCommerce

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in algol.plus Advanced Dynamic Pricing for WooCommerce advanced-dynamic-pricing-for-woocommerce allows Cross Site Request Forgery.This issue affects Advanced Dynamic Pricin…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00168 Published 2025-04-17 No fix listed CWE-352

Open these records in search →