Product by WebToffee
Export And Import Users And Customers
7 known vulnerabilities in Export And Import Users And Customers (WebToffee), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-6558 | Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload | 7.2 | |
| High | CVE-2026-104368 | WebToffee Export and Import Users and Customers: Improper Encoding or Escaping of Output | 8.8 | |
| High | CVE-2025-1971 | WebToffee Export and Import Users and Customers: Deserialization of Untrusted Data | 7.2 | |
| High | CVE-2023-3459 | WebToffee Export and Import Users and Customers: Incorrect Authorization | 7.2 | |
| Medium | CVE-2025-1973 | WebToffee Export and Import Users and Customers: Path Traversal | 4.9 | |
| High | CVE-2025-1970 | WebToffee Export and Import Users and Customers: Server-Side Request Forgery (SSRF) | 7.6 | |
| Medium | CVE-2025-1972 | WebToffee Export and Import Users and Customers: External Control of File Name or Path | 2.7 |