# WebToffee Product Import Export for WooCommerce.

Every CVE that names WebToffee Product Import Export for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 SSRF via Redirects](https://agentprime.io/advisories/CVE-2026-118989.md)
  `CVE-2026-118989` · CVE record: WebToffee Product Import Export for WooCommerce · CVSS 5.1 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Product Import Export for WooCommerce plugin <= 2.5.6 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-48971.md)
  `CVE-2026-48971` · CVE record: WebToffee Product Import Export for WooCommerce · CVSS 4.3 Medium · Not analysed yet · Published 27 May 2026 · Tags: Broken access control
- [WordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2024-30231.md)
  `CVE-2024-30231` · CVE record: WebToffee Product Import Export for WooCommerce · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Mar 2024 · Tags: Unrestricted file upload
- [WordPress Product Import Export for WooCommerce Plugin <= 2.3.7 is vulnerable to Arbitrary File Upload](https://agentprime.io/advisories/CVE-2024-22152.md)
  `CVE-2024-22152` · CVE record: WebToffee Product Import Export for WooCommerce · CVSS 8.0 High · Not analysed yet · Published 24 Jan 2024 · Tags: Unrestricted file upload

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=webtoffee-product-import-export-for-woocommerce>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/webtoffee-product-import-export-for-woocommerce/>. Everything for agents: <https://agentprime.io/llms.txt>.