CVE-2024-10828: Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details
First published: Wed Nov 13 2024(Updated: )
The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted input during Order export when the "Try to convert serialized values" option is enabled. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| AlgolPlus Advanced Order Export For WooCommerce | <3.5.6 | |
| AlgolPlus Advanced Order Export For WooCommerce | <3.5.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.wordfence.com/threat-intel/vulnerabilities/id/a1c6eed6-7b3f-4b37-85f8-6613527daa54?source=cve
- https://plugins.trac.wordpress.org/browser/woo-order-export-lite/trunk/classes/core/trait-woe-core-extractor.php#L996
- https://plugins.trac.wordpress.org/browser/woo-order-export-lite/trunk/classes/PHPExcel/Shared/XMLWriter.php#L83
Frequently Asked Questions
What is the severity of CVE-2024-10828?
CVE-2024-10828 is considered high severity due to its potential for PHP Object Injection vulnerabilities.
What versions are affected by CVE-2024-10828?
CVE-2024-10828 affects all versions of the Advanced Order Export for WooCommerce plugin up to and including 3.5.5.
How do I fix CVE-2024-10828?
To fix CVE-2024-10828, update the Advanced Order Export for WooCommerce plugin to version 3.5.6 or later.
What causes CVE-2024-10828?
CVE-2024-10828 is caused by the deserialization of untrusted input during order export when the 'Try to convert serialized values' option is enabled.
Is CVE-2024-10828 easily exploitable?
Yes, CVE-2024-10828 can be easily exploited if the vulnerable plugin is used in a WordPress site without proper input validation.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/algolplus
- canonical/algolplus advanced order export for woocommerce