Product by WebToffee
Export and Import Users and Customers
10 known vulnerabilities in Export and Import Users and Customers (WebToffee), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-15092 | Export and Import Users and Customers: security vulnerability | 7.3 | |
| High | CVE-2020-12074 | Export and Import Users and Customers: security vulnerability | 8.8 | |
| High | CVE-2023-6558 | Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload | 7.2 | |
| High | CVE-2025-1971 | WebToffee Export and Import Users and Customers: Deserialization of Untrusted Data | 7.2 | |
| High | CVE-2023-3459 | WebToffee Export and Import Users and Customers: Incorrect Authorization | 7.2 | |
| Medium | CVE-2025-1973 | WebToffee Export and Import Users and Customers: Path Traversal | 4.9 | |
| High | CVE-2025-1970 | WebToffee Export and Import Users and Customers: Server-Side Request Forgery (SSRF) | 7.6 | |
| Medium | CVE-2024-30492 | WordPress Export and Import Users and Customers plugin <= 2.5.2 - Path Traversal vulnerability | 4.3 | |
| Medium | CVE-2024-32835 | WebToffee Import Export WordPress Users: Deserialization of Untrusted Data | 5.4 | |
| Medium | CVE-2025-1972 | WebToffee Export and Import Users and Customers: External Control of File Name or Path | 2.7 |