Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2024-1732
Disclosure Date: April 02, 2024 (last updated April 02, 2024)
The Sharkdropship for AliExpress Dropshipping and Affiliate plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wads_removeProductFromShop() function in all versions up to, and including, 2.2.4. This makes it possible for unauthenticated attackers to delete arbitrary posts.
0
Attacker Value
Unknown
CVE-2023-31215
Disclosure Date: December 20, 2023 (last updated December 29, 2023)
Unrestricted Upload of File with Dangerous Type vulnerability in AmaderCode Lab Dropshipping & Affiliation with Amazon.This issue affects Dropshipping & Affiliation with Amazon: from n/a through 2.1.2.
0
Attacker Value
Unknown
CVE-2022-3694
Disclosure Date: December 05, 2022 (last updated October 08, 2023)
The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator's account.
0
Attacker Value
Unknown
CVE-2022-3481
Disclosure Date: November 07, 2022 (last updated February 24, 2025)
The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanitise and escape a parameter before using it in a SQL statement via a REST endpoint available to unauthenticated users, leading to a SQL injection
0
Attacker Value
Unknown
CVE-2022-41623
Disclosure Date: October 12, 2022 (last updated February 24, 2025)
Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 on WordPress.
0
