OE
Product
Order Export & Order Import for WooCommerce
8
CVEs
0
On KEV
7.2
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 6Low 0
Watch
Add Order Export & Order Import for WooCommerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-13921 | 7.2 | Mar 20 | Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter Affected: through 2.6.0 |
| CVE-2024-22135 | 7.2 | Jan 24 | WordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File Upload Affected: through 2.4.3 |
| CVE-2024-13922 | 6.5 | Mar 20 | Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function Affected: through 2.6.0 |
| CVE-2024-13923 | 6.5 | Mar 20 | Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function Affected: through 2.6.0 |
| CVE-2026-94375 | 5.3 | Oct 10 | Order Export & Order Import for WooCommerce <= 2.7.8 - Unauthenticated Sensitive File Exposure via Missing Directory Guard Re-verification in get_file_path() Affected: through 2.7.8 |
| CVE-2024-13920 | 4.9 | Mar 20 | Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function Affected: through 2.6.0 |
| CVE-2024-34751 | 4.4 | May 16 | WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability Affected: through 2.4.9 |
| CVE-2025-64382 | 4.3 | Nov 13 | WordPress Order Export & Order Import for WooCommerce plugin <= 2.6.7 - Broken Access Control vulnerability Affected: through 2.6.7 |
Showing 8