Skip to content
Noroxi

AlgolPlus records

13 published records for vendor algolplus.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
15.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 20
  3. 21
  4. 22
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2024-10828
    39Monitor

    Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details

    CriticalCVSS 9.8No exploitEPSS 1%

    algolplus · advanced order export for woocommerceNov 13, 2024

  • CVE-2024-31266
    36Monitor

    WordPress Advanced Order Export For WooCommerce plugin <= 3.4.4 - Remote Code Execution (RCE) vulnerability

    CriticalCVSS 9.1No exploitEPSS 1%

    algolplus · advanced order export for woocommerceApr 25, 2024

  • CVE-2022-40203
    35Monitor

    WordPress Advanced Dynamic Pricing for WooCommerce Plugin <= 4.1.5 is vulnerable to Broken Access Control

    HighCVSS 8.8No exploitEPSS 0%

    algolplus · advanced dynamic pricing for woocommerceJan 17, 2024

  • CVE-2018-11525
    33Monitor

    The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.

    HighCVSS 7.8Proof of conceptEPSS 5%

    algolplus · advanced order export for woocommerceJun 19, 2018

  • CVE-2021-24169
    27Monitor

    Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)

    MediumCVSS 6.1Proof of conceptEPSS 10%

    algolplus · advanced order export for woocommerceApr 5, 2021

  • CVE-2022-41655
    26Monitor

    WordPress Phone Orders for WooCommerce plugin <= 3.7.1 - Auth. Sensitive Data Exposure vulnerability

    MediumCVSS 6.5No exploitEPSS 1%

    algolplus · phone orders for woocommerceNov 18, 2022

  • CVE-2022-40128
    26Monitor

    WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    algolplus · advanced order export for woocommerceNov 8, 2022

  • CVE-2020-11727
    25Monitor

    A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote a

    MediumCVSS 6.1No exploitEPSS 2%

    algolplus · advanced order export for woocommerceMay 6, 2020

  • CVE-2021-27349
    24Monitor

    Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.

    MediumCVSS 6.1No exploitEPSS 1%

    algolplus · advanced order export for woocommerceMar 31, 2021

  • CVE-2022-35275
    19Monitor

    WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 1%

    algolplus · advanced order export for woocommerceSep 9, 2022

  • CVE-2022-38095
    17Monitor

    WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    algolplus · advanced dynamic pricing for woocommerceSep 23, 2022

  • CVE-2022-43491
    17Monitor

    WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    algolplus · advanced dynamic pricing for woocommerceNov 8, 2022

  • CVE-2022-43488
    17Monitor

    WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    algolplus · advanced dynamic pricing for woocommerceNov 9, 2022