agentprime: webtoffee-export-and-import-users-and-customersEvery new CVE for webtoffee-export-and-import-users-and-customers.https://agentprime.io/CVE-2026-104368: Export and Import Users and Customers <= 2.7.5 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via Biographical Info Fieldhttps://agentprime.io/advisories/CVE-2026-104368/https://agentprime.io/advisories/CVE-2026-104368/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 04:32:43 GMTCVECVE-2025-1973: Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Functionhttps://agentprime.io/advisories/CVE-2025-1973/https://agentprime.io/advisories/CVE-2025-1973/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Mar 2025 11:23:31 GMTCVECVE-2025-1970: Export and Import Users and Customers <= 2.6.2 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Functionhttps://agentprime.io/advisories/CVE-2025-1970/https://agentprime.io/advisories/CVE-2025-1970/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Mar 2025 11:18:41 GMTCVECVE-2025-1971: Export and Import Users and Customers <= 2.6.2 - Authenticated (Admin+) PHP Object Injection via form_data Parameterhttps://agentprime.io/advisories/CVE-2025-1971/https://agentprime.io/advisories/CVE-2025-1971/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Mar 2025 11:18:40 GMTCVECVE-2025-1972: Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Functionhttps://agentprime.io/advisories/CVE-2025-1972/https://agentprime.io/advisories/CVE-2025-1972/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sat, 22 Mar 2025 11:18:40 GMTCVECVE-2023-6558: Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2023-6558/https://agentprime.io/advisories/CVE-2023-6558/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jan 2024 08:32:35 GMTCVECVE-2023-3459: Export and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password Changehttps://agentprime.io/advisories/CVE-2023-3459/https://agentprime.io/advisories/CVE-2023-3459/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jul 2023 02:39:24 GMTCVE