advanced_order_export vulnerabilities

2 known vulnerabilities in advanced_order_export from AlgolPlus. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Advanced Order Export For WooCommerce: Deserialization of Untrusted Data

  CVE-2024-10828Nov 13, 2024AlgolPlusEPSS 1.46%

  The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is en

• 9.1 Critical severity

  Advanced Order Export For WooCommerce: Improper Control of Generation of Code

  CVE-2024-31266Apr 25, 2024AlgolPlus

  Improper Control of Generation of Code ('Code Injection') vulnerability in AlgolPlus Advanced Order Export For WooCommerce allows Code Injection.This issue affects Advanced Order Export For WooCommerce: from n/a through 3.4.4.