Ali2Woo
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| AliExpress Dropshipping Plugin for WooCommerce & WordPress | 2 | – | Jun 19, 2024 |
| Ali2Woo Lite | 1 | – | Jun 21, 2024 |
| AliNext | 1 | – | Jun 17, 2026 |
Exploited and recent CVEs
- CVE-2024-37210 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - Broken Access Control vulnerability 0.3%
- CVE-2024-37212 WordPress AliExpress Dropshipping with AliNext Lite plugin <= 3.3.5 - CSRF to PHP Object Injection vulnerability 0.2%
- CVE-2024-2381 AliExpress Dropshipping with AliNext Lite <= 3.3.5 - Authenticated (Subscriber+) Arbitrary File Upload 0.9%
- CVE-2024-4450 AliExpress Dropshipping with AliNext Lite <= 3.3.6 - Missing Authorization via Several Functions 0.3%