agentprime: webtoffee-order-export-order-import-for-woocommerceEvery new CVE for webtoffee-order-export-order-import-for-woocommerce.https://agentprime.io/CVE-2026-94375: Order Export & Order Import for WooCommerce <= 2.7.8 - Unauthenticated Sensitive File Exposure via Missing Directory Guard Re-verification in get_file_path()https://agentprime.io/advisories/CVE-2026-94375/https://agentprime.io/advisories/CVE-2026-94375/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 05:31:00 GMTCVECVE-2025-64382: WordPress Order Export & Order Import for WooCommerce plugin <= 2.6.7 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2025-64382/https://agentprime.io/advisories/CVE-2025-64382/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Nov 2025 09:24:35 GMTCVECVE-2024-13920: Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Functionhttps://agentprime.io/advisories/CVE-2024-13920/https://agentprime.io/advisories/CVE-2024-13920/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 11:11:28 GMTCVECVE-2024-13921: Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameterhttps://agentprime.io/advisories/CVE-2024-13921/https://agentprime.io/advisories/CVE-2024-13921/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 11:11:27 GMTCVECVE-2024-13922: Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Functionhttps://agentprime.io/advisories/CVE-2024-13922/https://agentprime.io/advisories/CVE-2024-13922/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 11:11:26 GMTCVECVE-2024-13923: Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Functionhttps://agentprime.io/advisories/CVE-2024-13923/https://agentprime.io/advisories/CVE-2024-13923/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 11:11:25 GMTCVECVE-2024-34751: WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2024-34751/https://agentprime.io/advisories/CVE-2024-34751/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 May 2024 15:47:13 GMTCVECVE-2024-22135: WordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File Uploadhttps://agentprime.io/advisories/CVE-2024-22135/https://agentprime.io/advisories/CVE-2024-22135/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jan 2024 11:51:37 GMTCVE