CVE-2024-37210

MEDIUM NVD

CVSS Score 6.5

Severity MEDIUM

Published Jun 17, 2026

Vendor unknown

Description

Missing Authorization vulnerability in ali2woo AliNext allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AliNext: from n/a through 3.3.5.

References

https://patchstack.com/database/wordpress/plugin/ali2woo-lite/vulnerability/wordpress-aliexpress-dropshipping-with-alinext-lite-plugin-3-3-5-broken-access-control-vulnerability-2?_s_id=cve