What’s Vulnerable › Products

webtoffee Product Import Export for WooCommerce – Import Export Product CSV Suite vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your webtoffee Product Import Export for WooCommerce – Import Export Product CSV Suite version is affected

Latest webtoffee Product Import Export for WooCommerce – Import Export Product CSV Suite vulnerabilities

• CVE-2026-118989 — WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 SSRF via Redirects (CVSS 5.5)
• CVE-2026-48971 — WordPress Product Import Export for WooCommerce plugin <= 2.5.6 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2025-1913 — Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter (CVSS 7.2)
• CVE-2025-1912 — Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function (CVSS 7.6)
• CVE-2025-1911 — Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function (CVSS 6.5)
• CVE-2025-1769 — Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function (CVSS 4.9)
• CVE-2024-30231 — WordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerability (CVSS 7.2)
• CVE-2024-22152 — WordPress Product Import Export for WooCommerce Plugin <= 2.3.7 is vulnerable to Arbitrary File Upload (CVSS 7.2)