Plugin icon

Comments Import & Export

comments-import-export-woocommerce

Vulnerabilities:

6

Last Updated:

May 26, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-03-20
Title
Comments Import & Export < 2.5.0 - Missing Authorization
Fixed in
Fixed in 2.5.0
CVSS
4.3 (medium)
Published
2025-06-02
Title
WordPress Comments Import & Export < 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.4.4
CVSS
6.4 (medium)
Published
2024-10-10
Title
WordPress Comments Import & Export < 2.3.9 - Authenticated (Author+) Arbitrary File Read via Directory Traversal
Fixed in
Fixed in 2.3.9
CVSS
6.5 (medium)
Published
2024-04-05
Title
WordPress Comments Import & Export < 2.3.6 - Cross-Site Request Forgery
Fixed in
Fixed in 2.3.6
CVSS
4.3 (medium)
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Fixed in
Fixed in 2.1.11
CVSS
n/a
Published
2018-06-21
Title
WordPress Comments Import & Export <= 2.0.4 - CSV Injection
Fixed in
Fixed in 2.0.5
CVSS
7.8 (high)