WordPress plugin
AliNext – AliExpress Dropshipping Plugin for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High2
- Medium4
- Low0
All AliNext – AliExpress Dropshipping Plugin for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Open Redirect ≤3.5.1Update to 3.5.4 | CVE-2025-30859 | |
| Critical9.6 | Cross-Site Request Forgery to PHP Object Injection ≤3.4.4Update to 3.4.5 | CVE-2024-37212 | |
| Medium6.1 | Cross-Site Request Forgery to Stored Cross-Site Scripting ≤3.4.6Update to 3.4.7 | CVE-2024-37213 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤3.3.6Update to 3.3.7 | CVE-2024-37211 | |
| Medium6.4 | Authenticated (Subscriber+) Stored Cross-Site Scripting ≤3.3.6Update to 3.3.7 | CVE-2024-37214 | |
| High8.8 | Authenticated (Subscriber+) Arbitrary File Upload ≤3.3.5Update to 3.3.6 | CVE-2024-2381 | |
| Medium6.3 | Missing Authorization via Several Functions ≤3.3.6Update to 3.3.7 | CVE-2024-4450 |
- High7.2Open Redirect
≤3.5.1Update to 3.5.4
- Critical9.6Cross-Site Request Forgery to PHP Object Injection
≤3.4.4Update to 3.4.5
- Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
≤3.4.6Update to 3.4.7
- Medium6.1Reflected Cross-Site Scripting
≤3.3.6Update to 3.3.7
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤3.3.6Update to 3.3.7
- High8.8Authenticated (Subscriber+) Arbitrary File Upload
≤3.3.5Update to 3.3.6
- Medium6.3Missing Authorization via Several Functions
≤3.3.6Update to 3.3.7
AliNext – AliExpress Dropshipping Plugin for WooCommerce: common questions
Does AliNext – AliExpress Dropshipping Plugin for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in AliNext – AliExpress Dropshipping Plugin for WooCommerce: 1 critical, 2 high, 4 medium. None are known to affect version null.
How do I check which version of AliNext – AliExpress Dropshipping Plugin for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent AliNext – AliExpress Dropshipping Plugin for WooCommerce vulnerability?
CVE-2025-30859, published Mar 27, 2025: AliNext <= 3.5.1 - Open Redirect. Severity: High (CVSS 7.2).
Is any AliNext – AliExpress Dropshipping Plugin for WooCommerce vulnerability listed in CISA KEV?
No. None of the known AliNext – AliExpress Dropshipping Plugin for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.