CVE-2022-41623

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-41623
Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 on WordPress.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://patchstack.com/database/vulnerability/woocommerce-alidropship/wordpress-ald-aliexpress-dropshipping-and-fulfillment-for-woocommerce-plugin-1-1-0-sensitive-data-exposure?_s_id=cve Third Party Advisory
https://villatheme.com/extensions/aliexpress-dropshipping-and-fulfillment-for-woocommerce/#tab-changelog Release Notes Vendor Advisory
https://patchstack.com/database/vulnerability/woocommerce-alidropship/wordpress-ald-aliexpress-dropshipping-and-fulfillment-for-woocommerce-plugin-1-1-0-sensitive-data-exposure?_s_id=cve Third Party Advisory
https://villatheme.com/extensions/aliexpress-dropshipping-and-fulfillment-for-woocommerce/#tab-changelog Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:villatheme:dropshipping_and_fulfillment_for_aliexpress_and_woocommerce:*:*:*:*:*:wordpress:*:*
History

21 Nov 2024, 07:23

Type Values Removed Values Added
References () https://patchstack.com/database/vulnerability/woocommerce-alidropship/wordpress-ald-aliexpress-dropshipping-and-fulfillment-for-woocommerce-plugin-1-1-0-sensitive-data-exposure?_s_id=cve - Third Party Advisory () https://patchstack.com/database/vulnerability/woocommerce-alidropship/wordpress-ald-aliexpress-dropshipping-and-fulfillment-for-woocommerce-plugin-1-1-0-sensitive-data-exposure?_s_id=cve - Third Party Advisory
References () https://villatheme.com/extensions/aliexpress-dropshipping-and-fulfillment-for-woocommerce/#tab-changelog - Release Notes, Vendor Advisory () https://villatheme.com/extensions/aliexpress-dropshipping-and-fulfillment-for-woocommerce/#tab-changelog - Release Notes, Vendor Advisory

18 Oct 2022, 18:42

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:villatheme:dropshipping_and_fulfillment_for_aliexpress_and_woocommerce:*:*:*:*:*:wordpress:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
References (CONFIRM) https://villatheme.com/extensions/aliexpress-dropshipping-and-fulfillment-for-woocommerce/#tab-changelog - (CONFIRM) https://villatheme.com/extensions/aliexpress-dropshipping-and-fulfillment-for-woocommerce/#tab-changelog - Release Notes, Vendor Advisory
References (CONFIRM) https://patchstack.com/database/vulnerability/woocommerce-alidropship/wordpress-ald-aliexpress-dropshipping-and-fulfillment-for-woocommerce-plugin-1-1-0-sensitive-data-exposure?_s_id=cve - (CONFIRM) https://patchstack.com/database/vulnerability/woocommerce-alidropship/wordpress-ald-aliexpress-dropshipping-and-fulfillment-for-woocommerce-plugin-1-1-0-sensitive-data-exposure?_s_id=cve - Third Party Advisory

14 Oct 2022, 20:31

Type Values Removed Values Added
New CVE
Information

Published : 2022-10-14 20:15

Updated : 2024-11-21 07:23

NVD link : CVE-2022-41623

Mitre link : CVE-2022-41623

CVE.ORG link : CVE-2022-41623

JSON object : View

Products Affected

villatheme

  • dropshipping_and_fulfillment_for_aliexpress_and_woocommerce
CWE
CWE-202

Exposure of Sensitive Information Through Data Queries

NVD-CWE-noinfo