WordPress Plugin Vulnerabilities

Advanced Order Export For WooCommerce <= 1.5.4 - CSV Injection

Description

The Advanced Order Export For WooCommerce WordPress plugin was affected by a CSV Injection security vulnerability.

Affects Plugins

Plugin icon
woo-order-export-lite
Fixed in 1.5.5

References

CVE
CVE-2018-11525
Exploitdb
44931
URL
https://plugins.trac.wordpress.org/changeset/1889593/woo-order-export-lite

Miscellaneous

Submitter
Ryan
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
540a8646-d307-4f8d-bcfd-3a4d06b61922

Timeline

Publicly Published
2018-06-20 (about 7 years ago)
Added
2018-06-21 (about 7 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-11-11
Title
Relais 2FA <= 1.0 - Authentication Bypass
Published
2015-09-30
Title
Ninja Forms <= 2.9.27 - Malicious File Export
Published
2023-05-30
Title
CRM Perks Forms < 1.1.2 - Admin+ Stored Cross-Site Scripting
Published
2014-08-01
Title
WP Online Store 1.3.1 - index.php Multiple Parameter Traversal Arbitrary File Access
Published
2014-08-01
Title
Zingiri Tickets - File Disclosure