https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:37:28.434333+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-281332 EUVD-2026-281332 2026-10-06T07:37:28.437830+00:00 EUVD-2026-281332 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4450 fkie_cve-2024-4450 2026-10-06T07:37:28.437863+00:00

The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the ImportAjaxController.php file in all versions up to, and including, 3.3.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform several actions like importing and modifying products. CVE-2024-37210 is likely a duplicate of this issue.

 https://cve.radiocsirt.org/vuln/ghsa-j553-72x4-g3hq GHSA-j553-72x4-g3hq 2026-10-06T07:37:28.437896+00:00

The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the ImportAjaxController.php file in all versions up to, and including, 3.3.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform several actions like importing and modifying products.