Skip to content
OpenAdvisories

Vendor

WebToffee

60 known vulnerabilities.

Products

Order Export & Order Import for WooCommerce 8 Export and Import Users and Customers 7 WordPress Backup & Migration 6 WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels 5 Product Import Export for WooCommerce – Import Export Product CSV Suite 4 Product Import Export for WooCommerce 4 WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels 4 Product Feed for WooCommerce 3 Comments Import & Export 3 WebToffee WP Backup and Migration 2 Smart Coupons for WooCommerce 2 WordPress Comments Import & Export 2 Import Export WordPress Users 2 Wishlist for WooCommerce 1 Stripe Payment Plugin for WooCommerce 1 WebToffee eCommerce Marketing Automation 1 Decorator – WooCommerce Email Customizer 1 WooCommerce Shipping Label 1 Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images 1 Accessibility Toolkit by WebYes 1 Product Reviews Import Export for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.7
    CVE-2025-1911

    Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function

    The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up to, and including, 2.5.0. Th…

    WebToffee Product Import Export for WooCommerce – Import Export Product CSV Suite Web / CMS
  • Low 2.7
    CVE-2025-1972

    Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function

    The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up to, and including, 2.6.2. This makes it possible for authentic…

    WebToffee Export and Import Users and Customers Web / CMS
  • Low 2.7
    CVE-2024-13922

    Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function

    The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up to, and including, 2.6.0. This makes it possible for aut…

    WebToffee Order Export & Order Import for WooCommerce Web / CMS
  • Low 3.7
    CVE-2024-31254

    WordPress WordPress Backup & Migration plugin <= 1.4.7 - Sensitive Data Exposure via Log File vulnerability

    Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.7.

    WebToffee WordPress Backup & Migration Web / CMS