guru-aliexpress

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

guru-aliexpress records in CISA KEV

No guru-aliexpress vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-24728 CVE-2024-37213 · GHSA-63q2-hp23-jpgh

WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.4.6 - CSRF to XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in guru-aliexpress AliNext ali2woo-lite allows Cross Site Request Forgery.This issue affects AliNext: from n/a through <= 3.4.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00178 Published 2024-07-12 No fix listed CWE-352

TI-2025-22129 CVE-2025-30859 · GHSA-f92x-c56c-pf59

WordPress AliNext plugin <= 3.5.1 - Open Redirection vulnerability

LOW 22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in guru-aliexpress AliNext ali2woo-lite allows Phishing.This issue affects AliNext: from n/a through <= 3.5.1.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00427 Published 2025-03-27 No fix listed CWE-601

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0