Skip to content
OpenAdvisories

Vendor

WebToffee

60 known vulnerabilities.

Products

Order Export & Order Import for WooCommerce 8 Export and Import Users and Customers 7 WordPress Backup & Migration 6 WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels 5 Product Import Export for WooCommerce – Import Export Product CSV Suite 4 Product Import Export for WooCommerce 4 WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels 4 Product Feed for WooCommerce 3 Comments Import & Export 3 WebToffee WP Backup and Migration 2 Smart Coupons for WooCommerce 2 WordPress Comments Import & Export 2 Import Export WordPress Users 2 Wishlist for WooCommerce 1 Stripe Payment Plugin for WooCommerce 1 WebToffee eCommerce Marketing Automation 1 Decorator – WooCommerce Email Customizer 1 WooCommerce Shipping Label 1 Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images 1 Accessibility Toolkit by WebYes 1 Product Reviews Import Export for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

60 results · Feed

  • Medium 4.4
    CVE-2024-34751

    WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.9.

    WebToffee Order Export & Order Import for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2024-3546

    WordPress Backup & Migration <= 1.4.8 - Missing Authorization to Directory Traversal

    The WordPress Backup & Migration plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wp_mgdp_populate_popup function in all versions up to, and including, 1.4.8. This makes it possible for authenticated a…

    WebToffee WebToffee WP Backup and Migration Web / CMS
  • Medium 5.9
    CVE-2024-32834

    WordPress WooCommerce Shipping Label plugin <= 2.3.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebToffee WooCommerce Shipping Label allows Stored XSS.This issue affects WooCommerce Shipping Label: from n/a through 2.3.8.

    WebToffee WooCommerce Shipping Label Web / CMS
  • Medium 5.4
    CVE-2024-32835

    WordPress Export and Import Users and Customers plugin <= 2.5.3 - Deserialization of untrusted data vulnerability

    Deserialization of Untrusted Data vulnerability in WebToffee Import Export WordPress Users.This issue affects Import Export WordPress Users: from n/a through 2.5.3.

    WebToffee Import Export WordPress Users Web / CMS
  • Medium 4.3
    CVE-2024-31235

    WordPress Comments Import & Export plugin <= 2.3.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress Comments Import & Export: from n/a through 2.3.5.

    WebToffee WordPress Comments Import & Export Web / CMS
  • Low 3.7
    CVE-2024-31254

    WordPress WordPress Backup & Migration plugin <= 1.4.7 - Sensitive Data Exposure via Log File vulnerability

    Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.7.

    WebToffee WordPress Backup & Migration Web / CMS
  • Medium 5.3
    CVE-2024-3216

    WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset

    The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wt_pklist_reset_settings() function in all versions up to, and inc…

    WebToffee WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels Web / CMS
  • Medium 4.3
    CVE-2024-30492

    WordPress Export and Import Users and Customers plugin <= 2.5.2 - Path Traversal vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebToffee Import Export WordPress Users.This issue affects Import Export WordPress Users: from n/a through 2.5.2.

    WebToffee Import Export WordPress Users Web / CMS
  • High 7.1
    CVE-2024-22288

    WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.4.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Reflected XSS.This issue affects WooCommerce PDF Invoices, Packi…

    WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Web / CMS
  • Critical 9.1
    CVE-2024-30231

    WordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a through 2.4.1.

    WebToffee Product Import Export for WooCommerce Web / CMS
  • Medium 6.1
    CVE-2024-0957

    WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting

    The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Customer Notes field in all versions up to, and including, 4.4.1 due to insufficient input sanitization a…

    WebToffee WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels Web / CMS
  • High 8.0
    CVE-2024-22135

    WordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File Upload

    Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.3.

    WebToffee Order Export & Order Import for WooCommerce Web / CMS
  • High 8.0
    CVE-2024-22152

    WordPress Product Import Export for WooCommerce Plugin <= 2.3.7 is vulnerable to Arbitrary File Upload

    Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a through 2.3.7.

    WebToffee Product Import Export for WooCommerce Web / CMS
  • High 7.2
    CVE-2023-6558

    Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload

    The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'upload_import_file' function in versions up to, and including, 2.4.8. This makes it possible for authentica…

    WebToffee Export and Import Users and Customers Web / CMS
  • Medium 4.3
    CVE-2023-7068

    WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.3.0 - Missing Authorization to Order Export

    The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on theprint_packinglist action in all versions up to, and including, 4.3.0. Thi…

    WebToffee WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels Web / CMS
  • Medium 4.3
    CVE-2023-48284

    WordPress Decorator – WooCommerce Email Customizer Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in WebToffee Decorator – WooCommerce Email Customizer allows Cross Site Request Forgery.This issue affects Decorator – WooCommerce Email Customizer: from n/a through 1.2.7.

    WebToffee Decorator – WooCommerce Email Customizer Web / CMS
  • Medium 6.1
    CVE-2022-45370

    WordPress WordPress Comments Import & Export Plugin <= 2.3.1 is vulnerable to CSV Injection

    Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress Comments Import & Export: from n/a through 2.3.1.

    WebToffee WordPress Comments Import & Export Web / CMS
  • Medium 6.1
    CVE-2022-46802

    WordPress Product Reviews Import Export for WooCommerce Plugin <= 1.4.8 is vulnerable to CSV Injection

    Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee Product Reviews Import Export for WooCommerce.This issue affects Product Reviews Import Export for WooCommerce: from n/a through 1.4.8.

    WebToffee Product Reviews Import Export for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2023-4040

    The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due t…

    WebToffee Stripe Payment Plugin for WooCommerce Web / CMS
  • High 7.2
    CVE-2023-3459

    Export and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password Change

    The Export and Import Users and Customers plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'hf_update_customer' function called via an AJAX action in versions up to, and including, 2.4.1. This ma…

    WebToffee Export and Import Users and Customers Web / CMS