Login Request a demo
PI
Product
Product Import Export for WooCommerce
by WebToffee · last CVE Oct 29, 2026
8
CVEs
0
On KEV
7.6
Max CVSS
1
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 4Medium 4Low 0
Severity
All severities8Critical0High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Product Import Export for WooCommerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-1912
7.6
0%
Mar 26
Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Affected: before 2.5.1
CVE-2025-1913
7.2
1%
Mar 26
Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Affected: before 2.5.1
CVE-2024-30231
7.2
1%
Mar 26
WordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerability
Affected: through 2.4.1
CVE-2024-22152
7.2
1%
Jan 24
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a…
Affected: before 2.3.8
Showing 4