Advisories · Technology

Algolplus Advanced Order Export For WooCommerce.

Every CVE that names Algolplus Advanced Order Export For WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-56042 CVE record

CVSS 7.1 High

WordPress Advanced Order Export For WooCommerce plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability
- Algolplus Advanced Order Export For WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 25 Jun 2026
CVE-2026-11360 CVE record

CVSS 4.9 Medium

Advanced Order Export For WooCommerce <= 4.0.10 - Authenticated (Shop Manager+) SQL Injection via 'sort_direction' Parameter
- algolplus Advanced Order Export For WooCommerce
- SQL injection
Not analysed yet 18 Jun 2026
CVE-2024-10828 CVE record

CVSS 8.1 High

Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details
- algolplus Advanced Order Export For WooCommerce
- Insecure deserialization
Not analysed yet 13 Nov 2024
CVE-2024-31266 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress Advanced Order Export For WooCommerce plugin <= 3.4.4 - Remote Code Execution (RCE) vulnerability
- AlgolPlus Advanced Order Export For WooCommerce
- Code injection
Not analysed yet 25 Apr 2024