blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2021-24169

MEDIUM 6.1 CVSS 3.1
Published
April 5, 2021
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-79
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS.

Affected WordPress components

  • Advanced Order Export For WooCommerce Plugin · woo-order-export-lite
    Confirmed match Active
    From 3.1.8 (including) to 3.1.8 (excluding)
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • Unknown Advanced Order Export For WooCommerce — From 3.1.8 (including) to 3.1.8 (excluding)
  • algolplus advanced_order_export_for_woocommerce — Before 3.1.8

References

  • packetstormsecurity.com http://packetstormsecurity.com/files/164263/WordPress-Advanced-Order-Export-For-WooCommerce-3.1.7-Cross-Site-Scripting.html Exploit, Third Party Advisory, VDB Entry
  • wpscan.com https://wpscan.com/vulnerability/09681a6c-57b8-4448-982a-fe8d28c87fc3 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record