Plugin icon

AliExpress Dropshipping Plugin for WooCommerce & WordPress

ali2woo-lite

Vulnerabilities:

7

Last Updated:

April 2, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2025-03-27
Title
AliNext < 3.5.4 - Open Redirect
Fixed in
Fixed in 3.5.4
CVSS
7.2 (high)
Published
2024-06-20
Title
Ali2Woo Lite < 3.4.7 - Stored XSS via CSRF
Fixed in
Fixed in 3.4.7
CVSS
7.1 (high)
Published
2024-06-20
Title
Ali2Woo Lite < 3.3.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.3.7
CVSS
6.4 (medium)
Published
2024-06-20
Title
Ali2Woo Lite < 3.4.4 - PHP Object Injection via CSRF
Fixed in
Fixed in 3.4.4
CVSS
7.5 (high)
Published
2024-06-20
Title
Ali2Woo Lite < 3.3.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.3.7
CVSS
6.1 (medium)
Published
2024-06-18
Title
AliExpress Dropshipping with AliNext Lite < 3.3.6 - Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 3.3.6
CVSS
8.8 (high)
Published
2024-06-18
Title
AliExpress Dropshipping with AliNext Lite < 3.3.7 - Missing Authorization via Several Functions
Fixed in
Fixed in 3.3.7
CVSS
6.3 (medium)