Advisories · Technology
webtoffee Order Export & Order Import for WooCommerce.
Every CVE that names webtoffee Order Export & Order Import for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Order Export & Order Import for WooCommerce <= 2.7.8 - Unauthenticated Sensitive File Exposure via Missing Directory Guard Re-verification in get_file_path()
- webtoffee Order Export & Order Import for WooCommerce
- Information disclosure
- CVSS 4.3 Medium
WordPress Order Export & Order Import for WooCommerce plugin <= 2.6.7 - Broken Access Control vulnerability
- WebToffee Order Export & Order Import for WooCommerce
- Broken access control
- CVSS 4.9 Medium
Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
- webtoffee Order Export & Order Import for WooCommerce
- Path traversal
- CVSS 7.2 High
Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
- webtoffee Order Export & Order Import for WooCommerce
- Insecure deserialization
- CVSS 2.7 Low
Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
- webtoffee Order Export & Order Import for WooCommerce
- Path traversal
- CVSS 7.6 High
Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
- webtoffee Order Export & Order Import for WooCommerce
- Server-side request forgery (SSRF)
- CVSS 4.4 Medium
WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability
- WebToffee Order Export & Order Import for WooCommerce
- Insecure deserialization
- CVSS 8.0 High
WordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File Upload
- WebToffee Order Export & Order Import for WooCommerce
- Unrestricted file upload