Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3026▼ 51 respecto a la semana anterior
Críticas / altas1412▲ 58 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)385▼ 125 respecto a la semana anterior
12 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.1) | 0.25% | — | Algolplus Advanced Order Export FOR WoocommerceAI | 25/6/2026 | 25/6/2026 | Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions. | |
| Aplazada | Media (4.9) | 0.47% | — | Algolplus Advanced Order Export FOR WoocommerceAI | 18/6/2026 | 18/6/2026 | The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_direction' parameter in all versions up to, and including, 4.0.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it… | |
| Aplazada | Media (5.9) | 0.47% | — | Jem-products Order Export FOR WoocommerceAI | 31/1/2025 | 17/6/2026 | The Order Export for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.24 via the 'uploads' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads directory which can… | |
| Analizada | Crítica (9.8) | 1.5% | — | Algolplus Advanced Order Export FOR Woocommerce | 13/11/2024 | 17/6/2026 | The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for unauthenticated attackers… | |
| Modificada | Alta (7.5) | 0.37% | — | Jem-products Order Export FOR Woocommerce | 26/8/2024 | 17/6/2026 | Insertion of Sensitive Information Into Sent Data vulnerability in WebFactory Order Export for WooCommerce order-export-and-more-for-woocommerce.This issue affects Order Export for WooCommerce: from n/a through <= 3.23. | |
| Aplazada | Crítica (9.1) | 0.69% | — | Algolplus Advanced Order Export FOR WoocommerceAI | 25/4/2024 | 17/6/2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in AlgolPlus Advanced Order Export For WooCommerce allows Code Injection.This issue affects Advanced Order Export For WooCommerce: from n/a through 3.4.4. | |
| Modificada | Media (6.5) | 0.35% | — | Algolplus Advanced Order Export FOR Woocommerce | 8/11/2022 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file download. | |
| Modificada | Media (4.8) | 0.55% | — | Algolplus Advanced Order Export FOR Woocommerce | 9/9/2022 | 17/6/2026 | Authenticated (shop manager+) Reflected Cross-Site Scripting (XSS) vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin <= 3.3.1 at WordPress. | |
| Modificada | Media (6.1) | 10% | — | Algolplus Advanced Order Export FOR Woocommerce | 5/4/2021 | 17/6/2026 | This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS. | |
| Modificada | Media (6.1) | 0.78% | — | Algolplus Advanced Order Export FOR Woocommerce | 31/3/2021 | 17/6/2026 | Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727. | |
| Modificada | Media (6.1) | 2.0% | — | Algolplus Advanced Order Export FOR Woocommerce | 6/5/2020 | 17/6/2026 | A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the view/settings-form.php woe_post_type parameter. | |
| Modificada | Alta (7.8) | 5.1% | — | Algolplus Advanced Order Export FOR Woocommerce | 19/6/2018 | 17/6/2026 | The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection. |