Login Request a demo
WE
Vendor
WebToffee
26 products with CVEs on record
84
CVEs
0
On KEV
4
New 30D
Products
OE
Order Export & Order Import for WooCommerce
webtoffee
7.2
8 CVEs0 on KEV1 new
PI
Product Import Export for WooCommerce
WebToffee
7.6
8 CVEs0 on KEV1 new
WB
WordPress Backup & Migration
WebToffee
7.5
6 CVEs0 on KEV1 new
WW
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
webtoffee
7.5
5 CVEs0 on KEV1 new
IE
Import Export WordPress Users
WebToffee
8.8
10 CVEs0 on KEV0 new
WP
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels
WebToffee
7.5
7 CVEs0 on KEV0 new
EA
Export and Import Users and Customers
webtoffee
7.6
5 CVEs0 on KEV0 new
BA
Backup And Migration
Webtoffee
7.5
4 CVEs0 on KEV0 new
PI
Product Import Export for WooCommerce – Import Export Product CSV Suite
webtoffee
7.6
4 CVEs0 on KEV0 new
CI
Comments Import & Export
webtoffee
7.7
3 CVEs0 on KEV0 new
PF
Product Feed for WooCommerce
WebToffee
7.2
3 CVEs0 on KEV0 new
SP
Stripe Payment Plugin For Woocommerce
Webtoffee
9.8
3 CVEs0 on KEV0 new
GC
Gdpr Cookie Consent
Webtoffee
6.5
2 CVEs0 on KEV0 new
SC
Smart Coupons for WooCommerce
WebToffee
7.5
2 CVEs0 on KEV0 new
WC
Wordpress Comments Import And Export
Webtoffee
9.8
2 CVEs0 on KEV0 new
WC
WordPress Comments Import & Export
WebToffee
9.8
2 CVEs0 on KEV0 new
AT
Accessibility Toolkit by WebYes
WebToffee
4.3
1 CVEs0 on KEV0 new
AT
Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images
webtoffee
4.3
1 CVEs0 on KEV0 new
DE
Decorator
Webtoffee
8.8
1 CVEs0 on KEV0 new
DW
Decorator – WooCommerce Email Customizer
WebToffee
8.8
1 CVEs0 on KEV0 new
IA
Import And Export Users And Customers
Webtoffee
5.4
1 CVEs0 on KEV0 new
PR
Product Reviews Import Export for WooCommerce
WebToffee
9.8
1 CVEs0 on KEV0 new
WE
WebToffee eCommerce Marketing Automation
WebToffee
4.3
1 CVEs0 on KEV0 new
WW
WebToffee WP Backup and Migration
webtoffee
4.3
1 CVEs0 on KEV0 new
WF
Wishlist for WooCommerce
WebToffee
5.9
1 CVEs0 on KEV0 new
WS
WooCommerce Shipping Label
WebToffee
5.9
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-118989
New
PI
Product Import Export for WooCommerce
WebToffee
5.5–Oct 29WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 SSRF via Redirects
CVE-2026-93746
WW
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
webtoffee
7.5
1%
Oct 10WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 5.0.2 - Insecure Direct Object Reference to Unauthenticated Unauthorized Order Document Access via 'email' Parameter
CVE-2026-94375
OE
Order Export & Order Import for WooCommerce
webtoffee
5.3
0%
Oct 10Order Export & Order Import for WooCommerce <= 2.7.8 - Unauthenticated Sensitive File Exposure via Missing Directory Guard Re-verification in get_file_path()
CVE-2026-97197
WB
WordPress Backup & Migration
WebToffee
7.5
0%
Sep 30WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability
CVE-2026-18027
WW
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
webtoffee
6.5
1%
Aug 22WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via 'customer_note' Parameter
CVE-2026-49056
WP
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels
WebToffee
7.5
0%
Jun 15WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.9.4 - Sensitive Data Exposure vulnerability
CVE-2026-48971
PI
Product Import Export for WooCommerce
WebToffee
4.3
0%
May 27WordPress Product Import Export for WooCommerce plugin <= 2.5.6 - Broken Access Control vulnerability
CVE-2026-45438
SC
Smart Coupons for WooCommerce
WebToffee
7.5
0%
May 25WordPress Smart Coupons for WooCommerce plugin < 2.3.0 - Broken Access Control vulnerability
CVE-2026-32441
CI
Comments Import & Export
WebToffee
7.7
0%
Mar 25WordPress Comments Import & Export plugin <= 2.4.9 - Broken Access Control vulnerability
CVE-2026-22480
PF
Product Feed for WooCommerce
WebToffee
7.2
1%
Mar 25WordPress Product Feed for WooCommerce plugin <= 2.3.3 - PHP Object Injection vulnerability
CVE-2025-67599
WE
WebToffee eCommerce Marketing Automation
WebToffee
4.3
0%
Dec 9WordPress WebToffee eCommerce Marketing Automation plugin <= 2.1.1 - Broken Access Control vulnerability
CVE-2025-66112
AT
Accessibility Toolkit by WebYes
WebToffee
4.3
0%
Nov 21WordPress Accessibility Toolkit by WebYes plugin <= 2.0.4 - Broken Access Control vulnerability
CVE-2025-66089
PF
Product Feed for WooCommerce
WebToffee
4.3
0%
Nov 21WordPress Product Feed for WooCommerce plugin <= 2.3.1 - Broken Access Control vulnerability
CVE-2025-64382
OE
Order Export & Order Import for WooCommerce
WebToffee
4.3
0%
Nov 13WordPress Order Export & Order Import for WooCommerce plugin <= 2.6.7 - Broken Access Control vulnerability
CVE-2025-12113
AT
Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images
webtoffee
4.3
0%
Nov 12Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images <= 1.8.3 - Missing Authorization to Authenticated (Subscriber+) API Key Deletion
CVE-2025-64358
SC
Smart Coupons for WooCommerce
WebToffee
4.3
0%
Oct 31WordPress Smart Coupons for WooCommerce plugin <= 2.2.3 - Broken Access Control vulnerability
CVE-2025-49287
PF
Product Feed for WooCommerce
WebToffee
4.3
0%
Jun 6WordPress Product Feed for WooCommerce plugin <= 2.2.8 - Broken Access Control Vulnerability
CVE-2025-3919
CI
Comments Import & Export
webtoffee
6.4
0%
Jun 2WordPress Comments Import & Export <= 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2024-8397
GC
Gdpr Cookie Consent
Webtoffee
5.4
0%
May 15GDPR Cookie Consent <= 2.6.0 - Unauthenticated Stored XSS
CVE-2024-8286
GC
Gdpr Cookie Consent
Webtoffee
6.5
0%
May 15GDPR Cookie Consent <= 2.6.0 - Bulk Delete via CSRF
CVE-2025-24651
WB
WordPress Backup & Migration
WebToffee
5.9
0%
Apr 17WordPress WebToffee WP Backup and Migration plugin <= 1.5.3 - Sensitive Data Exposure vulnerability
CVE-2025-1913
PI
Product Import Export for WooCommerce – Import Export Product CSV Suite
webtoffee
7.2
1%
Mar 26Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
CVE-2025-1911
PI
Product Import Export for WooCommerce – Import Export Product CSV Suite
webtoffee
6.5
0%
Mar 26Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
CVE-2025-1912
PI
Product Import Export for WooCommerce – Import Export Product CSV Suite
webtoffee
7.6
0%
Mar 26Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
CVE-2025-1769
PI
Product Import Export for WooCommerce – Import Export Product CSV Suite
webtoffee
4.9
1%
Mar 26Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
CVE-2025-1973
EA
Export and Import Users and Customers
webtoffee
4.9
1%
Mar 22Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
CVE-2025-1970
EA
Export and Import Users and Customers
webtoffee
7.6
0%
Mar 22Export and Import Users and Customers <= 2.6.2 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
CVE-2025-1971
EA
Export and Import Users and Customers
webtoffee
7.2
1%
Mar 22Export and Import Users and Customers <= 2.6.2 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
CVE-2025-1972
EA
Export and Import Users and Customers
webtoffee
6.5
0%
Mar 22Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
CVE-2024-13920
OE
Order Export & Order Import for WooCommerce
webtoffee
4.9
1%
Mar 20Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
CVE-2024-13921
OE
Order Export & Order Import for WooCommerce
webtoffee
7.2
1%
Mar 20Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
CVE-2024-13922
OE
Order Export & Order Import for WooCommerce
webtoffee
6.5
0%
Mar 20Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
CVE-2024-13923
OE
Order Export & Order Import for WooCommerce
webtoffee
6.5
0%
Mar 20Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
CVE-2025-24657
WF
Wishlist for WooCommerce
WebToffee
5.9
0%
Jan 24WordPress Wishlist for WooCommerce plugin <=2.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24644
WP
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels
WebToffee
4.8
0%
Jan 24WordPress WooCommerce PDF Invoices plugin <= 4.7.1 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2023-45636
WB
WordPress Backup & Migration
WebToffee
5.4
0%
Jan 2WordPress Backup & Migration plugin <= 1.4.1 - Broken Access Control vulnerability
CVE-2023-33928
WB
WordPress Backup & Migration
WebToffee
4.3
1%
Dec 13WordPress WordPress Backup & Migration plugin <= 1.4.0 - Broken Access Control vulnerability
CVE-2024-7514
CI
Comments Import & Export
webtoffee
6.5
1%
Oct 11WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversal
CVE-2024-34815
IA
Import And Export Users And Customers
Webtoffee
5.4
0%
Jun 11WordPress Import and export users and customers plugin <= 1.26.5 - Broken Access Control vulnerability
CVE-2023-52183
WB
WordPress Backup & Migration
WebToffee
5.4
0%
Jun 11WordPress WordPress Backup & Migration plugin <= 1.4.3 - Broken Access Control vulnerability
CVE-2023-51546
WP
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels
WebToffee
7.2
1%
May 17WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.2.1 - Privilege Escalation vulnerability
CVE-2024-34751
OE
Order Export & Order Import for WooCommerce
WebToffee
4.4
0%
May 16WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability
CVE-2024-3546
WW
WebToffee WP Backup and Migration
webtoffee
4.3
0%
May 2WordPress Backup & Migration <= 1.4.8 - Missing Authorization to Directory Traversal
CVE-2024-32834
WS
WooCommerce Shipping Label
WebToffee
5.9
0%
Apr 24WordPress WooCommerce Shipping Label plugin <= 2.3.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-32835
IE
Import Export WordPress Users
WebToffee
5.4
0%
Apr 24WordPress Export and Import Users and Customers plugin <= 2.5.3 - Deserialization of untrusted data vulnerability
CVE-2024-31235
WC
WordPress Comments Import & Export
WebToffee
4.3
0%
Apr 12WordPress Comments Import & Export plugin <= 2.3.5 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31254
WB
WordPress Backup & Migration
WebToffee
7.5
0%
Apr 10WordPress WordPress Backup & Migration plugin <= 1.4.7 - Sensitive Data Exposure via Log File vulnerability
CVE-2024-3216
WW
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
webtoffee
5.3
0%
Apr 6WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset
CVE-2024-30492
IE
Import Export WordPress Users
WebToffee
4.3
1%
Mar 29WordPress Export and Import Users and Customers plugin <= 2.5.2 - Path Traversal vulnerability
CVE-2024-22288
WP
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels
WebToffee
6.1
0%
Mar 27WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.4.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-30231
PI
Product Import Export for WooCommerce
WebToffee
7.2
1%
Mar 26WordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerability
CVE-2024-0957
WW
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
webtoffee
6.1
0%
Mar 22WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-22135
OE
Order Export & Order Import for WooCommerce
WebToffee
7.2
1%
Jan 24WordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File Upload
CVE-2024-22152
PI
Product Import Export for WooCommerce
WebToffee
7.2
1%
Jan 24WordPress Product Import Export for WooCommerce Plugin <= 2.3.7 is vulnerable to Arbitrary File Upload
CVE-2024-0705
SP
Stripe Payment Plugin For Woocommerce
Webtoffee
7.5
3%
Jan 19Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection
CVE-2023-6558
EA
Export and Import Users and Customers
webtoffee
7.2
1%
Jan 11Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload
CVE-2023-7068
WW
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
webtoffee
6.5
0%
Jan 3WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.3.0 - Missing Authorization to Order Export
CVE-2023-48284
DW
Decorator – WooCommerce Email Customizer
WebToffee
8.8
0%
Nov 30WordPress Decorator – WooCommerce Email Customizer Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-5738
BA
Backup And Migration
Webtoffee
5.4
0%
Nov 27WordPress Backup & Migration < 1.4.5 - Subscriber+ Stored XSS
CVE-2023-5737
BA
Backup And Migration
Webtoffee
4.3
0%
Nov 27WordPress Backup & Migration < 1.4.4 - Subscriber+ Plugin Settings Update