https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:38:55.468551+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-4450 CVE-2024-4450 — AliExpress Dropshipping with AliNext Lite <= 3.3.6 - Missing Authorization via Several Functions 2026-10-07T04:38:55.489199+00:00

Affected: ali2woo AliExpress Dropshipping Plugin for WooCommerce & WordPress

The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the ImportAjaxController.php file in all versions up to, and including, 3.3.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform several actions like importing and modifying products. CVE-2024-37210 is likely a duplicate of this issue.