Log in Start free

AlgolPlus

Products

ProductCVEsExploitedLatest
Advanced Order Export For WooCommerce4–Jun 25, 2026
Advanced Dynamic Pricing for WooCommerce (WordPress plugin)3–Nov 9, 2022
Advanced Order Export For WooCommerce (WordPress plugin)2–Nov 8, 2022
Advanced Dynamic Pricing for WooCommerce1–Jan 17, 2024
Phone Orders for WooCommerce (WordPress plugin)1–Nov 18, 2022

Exploited and recent CVEs

  • CVE-2026-56042 High 7.1 WordPress Advanced Order Export For WooCommerce plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-11360 Medium 4.9 Advanced Order Export For WooCommerce <= 4.0.10 - Authenticated (Shop Manager+) SQL Injection via 'sort_direction' Parameter 0.5%
  • CVE-2024-10828 High 8.1 Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details 1.5%
  • CVE-2024-31266 Critical 9.1 WordPress Advanced Order Export For WooCommerce plugin <= 3.4.4 - Remote Code Execution (RCE) vulnerability 0.7%
  • CVE-2022-40203 Medium 6.3 WordPress Advanced Dynamic Pricing for WooCommerce Plugin <= 4.1.5 is vulnerable to Broken Access Control 0.4%
  • CVE-2022-41655 Medium 4.3 WordPress Phone Orders for WooCommerce plugin <= 3.7.1 - Auth. Sensitive Data Exposure vulnerability 0.7%
  • CVE-2022-43488 Medium 5.4 WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability 0.3%
  • CVE-2022-40128 Medium 4.3 WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability 0.4%
  • CVE-2022-43491 Medium 5.4 WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability 0.4%
  • CVE-2022-38095 Medium 5.4 WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability 0.3%
  • CVE-2022-35275 Medium 4.8 WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability 0.6%