Skip to content
OpenAdvisories

Vendor

WebToffee

60 known vulnerabilities.

Products

Order Export & Order Import for WooCommerce 8 Export and Import Users and Customers 7 WordPress Backup & Migration 6 WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels 5 Product Import Export for WooCommerce – Import Export Product CSV Suite 4 Product Import Export for WooCommerce 4 WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels 4 Product Feed for WooCommerce 3 Comments Import & Export 3 WebToffee WP Backup and Migration 2 Smart Coupons for WooCommerce 2 WordPress Comments Import & Export 2 Import Export WordPress Users 2 Wishlist for WooCommerce 1 Stripe Payment Plugin for WooCommerce 1 WebToffee eCommerce Marketing Automation 1 Decorator – WooCommerce Email Customizer 1 WooCommerce Shipping Label 1 Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images 1 Accessibility Toolkit by WebYes 1 Product Reviews Import Export for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-1913 Public exploit

    Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter

    The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.5.0 via deserialization of untrusted input from the 'form_data' parameter This makes…

    WebToffee Product Import Export for WooCommerce – Import Export Product CSV Suite Web / CMS