VendorsWebToffeeproduct_import_export_for_woocommerceall versions
Vulnerabilities

WebToffee Product Import Export For WooCommerce

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2024-30231
WordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerability
Published 2024-03-26 · Modified
9.1EPSS 0.006
CVE-2024-22152
WordPress Product Import Export for WooCommerce Plugin <= 2.3.7 is vulnerable to Arbitrary File Upload
Published 2024-01-24 · Modified
8.0EPSS 0.005
CVE-2025-1912
Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Published 2025-03-26 · Analyzed
7.6EPSS 0.004
CVE-2025-1913
Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Published 2025-03-26 · Modified
7.2EPSS 0.009
CVE-2025-1911
Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
Published 2025-03-26 · Analyzed
6.5EPSS 0.004
CVE-2025-1769
Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Published 2025-03-26 · Analyzed
4.9EPSS 0.008