Advisories · Technology

WebToffee Product Import Export for WooCommerce.

Every CVE that names WebToffee Product Import Export for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118989 CVE record

CVSS 5.1 Medium

WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 SSRF via Redirects
- WebToffee Product Import Export for WooCommerce
- Server-side request forgery (SSRF)
Not analysed yet 29 Oct 2026
CVE-2026-48971 CVE record

CVSS 4.3 Medium

WordPress Product Import Export for WooCommerce plugin <= 2.5.6 - Broken Access Control vulnerability
- WebToffee Product Import Export for WooCommerce
- Broken access control
Not analysed yet 27 May 2026
CVE-2024-30231 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerability
- WebToffee Product Import Export for WooCommerce
- Unrestricted file upload
Not analysed yet 26 Mar 2024
CVE-2024-22152 CVE record

CVSS 8.0 High

WordPress Product Import Export for WooCommerce Plugin <= 2.3.7 is vulnerable to Arbitrary File Upload
- WebToffee Product Import Export for WooCommerce
- Unrestricted file upload
Not analysed yet 24 Jan 2024