What’s Vulnerable › Products

webtoffee Comments Import & Export vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your webtoffee Comments Import & Export version is affected

Latest webtoffee Comments Import & Export vulnerabilities

• CVE-2026-32441 — WordPress Comments Import & Export plugin <= 2.4.9 - Broken Access Control vulnerability (CVSS 7.7)
• CVE-2025-3919 — WordPress Comments Import & Export <= 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2024-7514 — WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversal (CVSS 6.5)