Security
فارسی
All products

product-import-export-for-woo

WordPress · Plugin
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Product Import Export for WooCommerce – CSV Product Importer & Exporter 2.5.1 - 2.6.8 - Authenticated (Shop Manager+) Server-Side Request ForgeryCVE-2026-118989 product-import-export-for-woo WordPress Medium Fix reported
Product Import Export for WooCommerce – Import Export Product CSV Suite <= 2.5.6 - Missing AuthorizationCVE-2026-48971 product-import-export-for-woo WordPress Medium Fix reported
Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data ParameterCVE-2025-1913 product-import-export-for-woo WordPress High Fix reported
Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page FunctionCVE-2025-1911 product-import-export-for-woo WordPress Low Fix reported
Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file FunctionCVE-2025-1912 product-import-export-for-woo WordPress High Fix reported
Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file FunctionCVE-2025-1769 product-import-export-for-woo WordPress Medium Fix reported
WebToffee Plugins <= (Various Versions) - Arbitrary User CreationCVE-2020-12074 comments-import-export-woocommerceorder-import-export-for-woocommerce WordPress High Fix reported
Product Import Export for WooCommerce <= 2.4.1 - Authenticated(Shop Manager+) Arbitrary File UploadCVE-2024-30231 product-import-export-for-woo WordPress High Fix reported
Product Import Export for WooCommerce <= 2.3.7 - Authenticated(Shop Manager+) Arbitrary File Upload via upload_import_fileCVE-2024-22152 product-import-export-for-woo WordPress High Fix reported