Skip to content
OpenAdvisories

Vendor

WebToffee

60 known vulnerabilities.

Products

Order Export & Order Import for WooCommerce 8 Export and Import Users and Customers 7 WordPress Backup & Migration 6 WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels 5 Product Import Export for WooCommerce – Import Export Product CSV Suite 4 Product Import Export for WooCommerce 4 WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels 4 Product Feed for WooCommerce 3 Comments Import & Export 3 WebToffee WP Backup and Migration 2 Smart Coupons for WooCommerce 2 WordPress Comments Import & Export 2 Import Export WordPress Users 2 Wishlist for WooCommerce 1 Stripe Payment Plugin for WooCommerce 1 WebToffee eCommerce Marketing Automation 1 Decorator – WooCommerce Email Customizer 1 WooCommerce Shipping Label 1 Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images 1 Accessibility Toolkit by WebYes 1 Product Reviews Import Export for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2025-1913 Public exploit

    Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter

    The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.5.0 via deserialization of untrusted input from the 'form_data' parameter This makes…

    WebToffee Product Import Export for WooCommerce – Import Export Product CSV Suite Web / CMS
  • Medium 6.5
    CVE-2024-7514 Public exploit

    WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversal

    The WordPress Comments Import & Export plugin for WordPress is vulnerable to to arbitrary file read due to insufficient file path validation during the comments import process, in versions up to, and including, 2.3.7. This makes it possible for authenticated …

    WebToffee Comments Import & Export Web / CMS