Product by WebToffee
Order Export & Order Import For Woocommerce
8 known vulnerabilities in Order Export & Order Import For Woocommerce (WebToffee), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-13921 | WebToffee Order Export & Order Import for WooCommerce: Deserialization of Untrusted Data | 7.2 | |
| High | CVE-2024-22135 | WebToffee Order Export & Order Import for WooCommerce: Unrestricted Upload of File with Dangerous Type | 8.0 | |
| Medium | CVE-2026-94375 | WebToffee Order Export & Order Import for WooCommerce: Files or Directories Accessible to External Parties | 5.3 | |
| Medium | CVE-2024-13920 | WebToffee Order Export & Order Import for WooCommerce: Path Traversal | 4.9 | |
| High | CVE-2024-13923 | WebToffee Order Export & Order Import for WooCommerce: Server-Side Request Forgery (SSRF) | 7.6 | |
| Medium | CVE-2025-64382 | WebToffee Order Export & Order Import for WooCommerce: Missing Authorization | 4.3 | |
| Medium | CVE-2024-13922 | WebToffee Order Export & Order Import for WooCommerce: External Control of File Name or Path | 2.7 | |
| Medium | CVE-2024-34751 | WebToffee Order Export & Order Import for WooCommerce: Deserialization of Untrusted Data | 4.4 |