Webtoffee

Product Import Export For Woocommerce

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2025-1913

  • EPSS 1.34%
  • Veröffentlicht 26.03.2025 11:55:53
  • Zuletzt bearbeitet 05.12.2025 17:16:03

The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.5.0 via deserialization of untrusted input from the 'form_data' parameter T...

6.5

CVE-2025-1911

  • EPSS 0.19%
  • Veröffentlicht 26.03.2025 11:55:52
  • Zuletzt bearbeitet 09.07.2025 16:55:18

The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up to, and including, ...

7.6

CVE-2025-1912

  • EPSS 0.1%
  • Veröffentlicht 26.03.2025 11:55:51
  • Zuletzt bearbeitet 09.07.2025 16:49:31

The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the validate_file() Function. This makes it possible for aut...

4.9

CVE-2025-1769

  • EPSS 0.27%
  • Veröffentlicht 26.03.2025 11:22:09
  • Zuletzt bearbeitet 09.07.2025 16:57:42

The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.0 via the download_file() function. This makes it possible for authenticat...

7.2

CVE-2024-30231

  • EPSS 0.82%
  • Veröffentlicht 26.03.2024 12:15:50
  • Zuletzt bearbeitet 10.03.2025 17:06:14

Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a through 2.4.1.

7.2

CVE-2024-22152

  • EPSS 0.22%
  • Veröffentlicht 24.01.2024 12:15:57
  • Zuletzt bearbeitet 21.11.2024 08:55:41

Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a through 2.3.7.