Medium severity4.8NVD Advisory· Published Sep 9, 2022· Updated Jun 17, 2026

CVE-2022-35275

Description

Authenticated (shop manager+) Reflected Cross-Site Scripting (XSS) vulnerability in AlgolPlus Advanced Order Export For WooCommerce plugin <= 3.3.1 at WordPress.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Advanced Order Export For Woocommercellm-fuzzy
Range: <=3.3.1
Package: https://wordpress.org/plugins/advanced-order-export-for-woocommerce
AlgolPlus/Advanced Order Export For WooCommerce (WordPress plugin)v5
Range: <= 3.3.1

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/woo-order-export-lite/wordpress-advanced-order-export-for-woocommerce-plugin-3-3-1-reflected-cross-site-scripting-xss-vulnerability/_s_id=cvenvdThird Party Advisory
wordpress.org/plugins/woo-order-export-lite/nvdProductRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000