CVE-2020-11727

概要

参考情報

• packetstormsecurity.com/files/157557/WordPress-WooCommerce-Advanced-Order-Export-3.1.3-Cross-Site-Scripting.html · Exploit
• plugins.trac.wordpress.org/browser/woo-order-export-lite/trunk/view/settings-form.php · Third Party Advisory
• wordpress.org/plugins/woo-order-export-lite · Release Notes
• themissinglink.com.au/security-advisories-cve-2020-11727 · Third Party Advisory

advanced order export for woocommerce のその他の脆弱性

• CVE-2024-10828緊急 9.8The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3…
• CVE-2022-40128中 6.5Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file…
• CVE-2022-35275中 4.8Authenticated (shop manager+) Reflected Cross-Site Scripting (XSS) vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin <…
• CVE-2021-24169中 6.1This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab paramete…
• CVE-2021-27349中 6.1Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.