CVE-2022-41623: WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability - Patchstack

Verified

Fixed

7.5

CVSS 3.1 score High severity

Report

Monitoring Not reported to be exploited

Software

ALD - AliExpress Dropshipping and Fulfillment for WooCommerce

Vulnerable versions

<= 1.1.0

PSID

237a197cf2a9

Classification

Sensitive Data Exposure

OWASP Top 10

A3: Sensitive Data Exposure

Required privilege

Can be exploited remotely without any authentication.

Publicly disclosed

2022-10-12

Details

Sensitive Data Exposure vulnerability discovered by Dave Jong (Patchstack) in WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin (versions <= 1.1.0).

Solution

Update the WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce plugin to the latest available version (at least 1.1.1).

References

Plugin changelog