Vendor

    WebToffee

    67 known vulnerabilities in products by WebToffee, 0 of them actively exploited (CISA KEV).

    Key figures

    67

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WebToffee
    CriticalCVE-2024-0705

    Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection

    also in 1 other product

    		9.8
    HighCVE-2018-11526

    WebToffee WordPress Comments Import And Export: security vulnerability

    		7.8
    HighCVE-2019-15092

    Export and Import Users and Customers: security vulnerability

    		7.3
    HighCVE-2020-12074

    Export and Import Users and Customers: security vulnerability

    		8.8
    CriticalCVE-2023-3162

    Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass

    also in 1 other product

    		9.8
    MediumCVE-2026-18027

    Path Traversal (CVE-2026-18027)

    		6.5
    HighCVE-2026-93746

    Authorization Bypass Through User-Controlled Key (CVE-2026-93746)

    		7.5
    HighCVE-2023-6558

    Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload

    		7.2
    MediumCVE-2024-7514

    WebToffee Comments Import & Export: Path Traversal

    		6.5
    HighCVE-2025-1913

    Product Import Export for WooCommerce – Import Export Product CSV Suite: Deserialization of Untrusted Data

    		7.2
    HighCVE-2026-97197

    WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability

    		7.5
    CriticalCVE-2024-30231

    WebToffee Product Import Export for WooCommerce: Unrestricted Upload of File with Dangerous Type

    		9.1
    HighCVE-2025-1971

    WebToffee Export and Import Users and Customers: Deserialization of Untrusted Data

    		7.2
    HighCVE-2023-3459

    WebToffee Export and Import Users and Customers: Incorrect Authorization

    		7.2
    HighCVE-2026-22480

    WordPress Product Feed for WooCommerce plugin <= 2.3.3 - PHP Object Injection vulnerability

    		7.2
    HighCVE-2024-13921

    WebToffee Order Export & Order Import for WooCommerce: Deserialization of Untrusted Data

    		7.2
    HighCVE-2026-49056

    Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVE-2026-49056)

    		7.5
    HighCVE-2023-51546

    WebToffee Woocommerce PDF Invoices\, Packing Slips\, Delivery Notes And Shipping Labels: Improper Privilege Management

    		7.2
    CriticalCVE-2022-45370

    WordPress WordPress Comments Import & Export Plugin <= 2.3.1 is vulnerable to CSV Injection

    		6.1
    MediumCVE-2026-94375

    WebToffee Order Export & Order Import for WooCommerce: Files or Directories Accessible to External Parties

    		5.3
    HighCVE-2024-22152

    WebToffee Product Import Export for WooCommerce: Unrestricted Upload of File with Dangerous Type

    		8.0
    HighCVE-2024-22135

    WebToffee Order Export & Order Import for WooCommerce: Unrestricted Upload of File with Dangerous Type

    		8.0
    HighCVE-2026-45438

    WordPress Smart Coupons for WooCommerce plugin < 2.3.0 - Broken Access Control vulnerability

    		7.5
    MediumCVE-2025-1769

    Product Import Export for WooCommerce – Import Export Product CSV Suite: Path Traversal

    		4.9
    HighCVE-2026-32441

    WordPress Comments Import & Export plugin <= 2.4.9 - Broken Access Control vulnerability

    		7.7

    All vulnerabilities in search

    Products

    Products by WebToffee
    Order Export & Order Import For Woocommerce130
    Export and Import Users and Customers100
    WebToffee Product Import Export for WooCommerce100
    Woocommerce PDF Invoices\, Packing Slips\, Delivery Notes And Shipping Labels100
    Export And Import Users And Customers60
    Wordpress Backup & Migration60
    Webtoffee Woocommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels50
    Product Import Export For Woocommerce – Import Export Product Csv Suite40
    Stripe Payment Plugin for WooCommerce40
    Comments Import & Export30
    Product Feed For Woocommerce30
    WordPress Backup & Migration30