Advisories · Technology
sidngr Import Export For WooCommerce.
Every CVE that names sidngr Import Export For WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Import Export For WooCommerce <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
- sidngr Import Export For WooCommerce
- Broken access control
- CVSS 7.1 High
WordPress Import Export For WooCommerce plugin <= 1.6.2 - CSRF to Stored XSS vulnerability
- sidngr Import Export For WooCommerce
- Cross-site request forgery (CSRF)
- CVSS 9.9 CriticalCritical · CVSS 9+
WordPress Import Export For WooCommerce plugin <= 1.6.2 - Arbitrary File Upload vulnerability
- sidngr Import Export For WooCommerce
- Unrestricted file upload