CVE-2026-57352
Medium · 4.8CVSS
4.8
EPSS
0.3%
Published
Jul 2, 2026
CISA due date
—
The record
Unauthenticated Broken Authentication in ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce <= 2.2.0 versions.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-115967 Weak Authentication vulnerability in Hamid Alinia Login with phone number… CWE-1390
- CVE-2025-30414 Local privilege escalation due to improper authentication. CWE-1390
- CVE-2026-85939 Weak authentication in Windows Kernel allows an authorized attacker to bypass a security… CWE-1390
- CVE-2026-83840 Weak authentication in Windows Error Reporting allows an authorized attacker to elevate… CWE-1390
- CVE-2026-83674 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390
- CVE-2026-83657 Weak authentication in Windows Modern Device Management (MDM) allows an authorized… CWE-1390
- CVE-2026-83586 Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows… CWE-1390
- CVE-2026-83511 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390