Product by WebToffee

    WebToffee Product Import Export for WooCommerce

    8 known vulnerabilities in WebToffee Product Import Export for WooCommerce (WebToffee), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WebToffee Product Import Export for WooCommerce (WebToffee)
    HighCVE-2025-1913

    Product Import Export for WooCommerce – Import Export Product CSV Suite: Deserialization of Untrusted Data

    also in 1 other product

    		7.2
    CriticalCVE-2024-30231

    WebToffee Product Import Export for WooCommerce: Unrestricted Upload of File with Dangerous Type

    		9.1
    HighCVE-2024-22152

    WebToffee Product Import Export for WooCommerce: Unrestricted Upload of File with Dangerous Type

    		8.0
    MediumCVE-2025-1769

    Product Import Export for WooCommerce – Import Export Product CSV Suite: Path Traversal

    also in 1 other product

    		4.9
    MediumCVE-2026-118989

    WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 SSRF via Redirects

    		5.5
    HighCVE-2025-1912

    Product Import Export for WooCommerce – Import Export Product CSV Suite: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		7.6
    MediumCVE-2026-48971

    WebToffee Product Import Export for WooCommerce: Missing Authorization

    		4.3
    MediumCVE-2025-1911

    Product Import Export for WooCommerce – Import Export Product CSV Suite: External Control of File Name or Path

    also in 1 other product

    		2.7

    All products by WebToffee