Advisories · Technology

WebToffee Product Feed for WooCommerce.

Every CVE that names WebToffee Product Feed for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-22480 CVE record

CVSS 7.2 High

WordPress Product Feed for WooCommerce plugin <= 2.3.3 - PHP Object Injection vulnerability
- WebToffee Product Feed for WooCommerce
- Insecure deserialization
Not analysed yet 25 Mar 2026
CVE-2025-66089 CVE record

CVSS 4.3 Medium

WordPress Product Feed for WooCommerce plugin <= 2.3.1 - Broken Access Control vulnerability
- WebToffee Product Feed for WooCommerce
- Broken access control
Not analysed yet 21 Nov 2025
CVE-2025-49287 CVE record

CVSS 4.3 Medium

WordPress Product Feed for WooCommerce plugin <= 2.2.8 - Broken Access Control Vulnerability
- WebToffee Product Feed for WooCommerce
- Broken access control
Not analysed yet 6 Jun 2025