Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Algolplus

First CVE: Jun 19, 2018Active for: 8 yearsTotal CVEs: 15
37.2
VTI Score
Medium

Algolplus maintains a focused line of WordPress and WooCommerce commerce plugins that extend e-commerce functionality through order management, dynamic pricing, and payment processing features. Its vulnerability profile centers on web-application input-handling and state-management weakness classes including cross-site request forgery, cross-site scripting, untrusted deserialization, and information exposure, which are characteristic of plugin-based extensions with direct request and database access; the vendor's disclosures frequently acquire public exploit tooling. Defenders should treat updates to these plugins as moderately urgent, particularly where they are exposed to unauthenticated users or manage sensitive transaction data; live severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
15
Total CVEs
More Total CVEs than 94% of tracked vendors
0.8
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 12% of tracked vendors
6.4
Avg CVSS Score
Higher Avg CVSS Score than 39% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Algolplus over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 19, 2018
8 years ago
Most Recent CVE
Jun 25, 2026
29 days ago

Products(3 total)

Top CVEs

Signals from CVEs in this vendor scope (15 CVEs).

15 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-24169MEDIUM
This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to re
Apr 5, 20216.144NOYES
CVE-2018-11525HIGH
The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.
Jun 19, 20187.835NOYES
CVE-2026-56042HIGH
Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions.
Jun 25, 20267.129NONO
CVE-2024-10828CRITICAL
The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.5 via deserialization of untrusted in
Nov 13, 20249.829NONO
CVE-2024-31266CRITICAL
Improper Control of Generation of Code ('Code Injection') vulnerability in AlgolPlus Advanced Order Export For WooCommerce allows Code Injection.This issue affects Advanced Order E
Apr 25, 20249.125NONO
CVE-2022-40203HIGH
Missing Authorization vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce.This issue affects Advanced Dynamic Pricing for WooCommerce: from n/a through 4.1.5.
Jan 17, 20248.824NONO
CVE-2022-40128MEDIUM
Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress leading to export file download.
Nov 8, 20226.522NONO
CVE-2022-41655MEDIUM
Auth. (subscriber+) Sensitive Data Exposure vulnerability in Phone Orders for WooCommerce plugin <= 3.7.1 on WordPress.
Nov 18, 20226.521NONO
CVE-2021-27349MEDIUM
Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.
Mar 31, 20216.121NONO
CVE-2026-11360MEDIUM
The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_direction' parameter in all versions up to, and including, 4.0.1
Jun 18, 20264.920NONO
View all 15 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products15 CVEs
67%
20%
13%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (6.7%)
Network14 (93.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low15 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None5 (33.3%)
Unknown0 (0.0%)
Required10 (66.7%)
Privileges Required
Low2 (13.3%)
High3 (20.0%)
None10 (66.7%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (15 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
6.7% of CVEs· 96th percentile
ExploitDB
2 CVEs
13.3% of CVEs· 76th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Algolplus.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Algolplus — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Algolplus's Products

View all 4 CNAs →

Top CWEs