All 3 CVE vulnerabilities found in ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce, with AI-generated Chinese analysis, references, and POCs.
Vendor: VillaTheme(villatheme.com)
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-103685 | WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.4 - Broken Access Control vulnerability CWE-862 | 4.3 | Medium | 2026-10-10 |
| CVE-2026-57352 | WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.0 - Broken Authentication vulnerability CWE-1390 | 4.8 | Medium | 2026-07-02 |
| CVE-2022-46811 | WordPress ALD Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 1.0.21 - Broken Access Control + CSRF CWE-862 | 4.3 | Medium | 2024-12-13 |
All 3 known CVE vulnerabilities affecting ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce with full Chinese analysis, references, and POCs where available.