What’s Vulnerable › Products
webtoffee Export and Import Users and Customers vulnerabilities
9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your webtoffee Export and Import Users and Customers version is affected
Latest webtoffee Export and Import Users and Customers vulnerabilities
- CVE-2025-1973 — Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function (CVSS 4.9)
- CVE-2025-1972 — Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function (CVSS 6.5)
- CVE-2025-1971 — Export and Import Users and Customers <= 2.6.2 - Authenticated (Admin+) PHP Object Injection via form_data Parameter (CVSS 7.2)
- CVE-2025-1970 — Export and Import Users and Customers <= 2.6.2 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function (CVSS 7.6)
- CVE-2024-30492 — WordPress Export and Import Users and Customers plugin <= 2.5.2 - Path Traversal vulnerability (CVSS 4.3)
- CVE-2023-6558 — Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload (CVSS 7.2)
- CVE-2023-3459 — Export and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password Change (CVSS 7.2)
- CVE-2020-12074 — (CVSS 8.8)
- CVE-2019-15092 — (CVSS 7.3)