Plugin icon

Order Export & Order Import for WooCommerce

order-import-export-for-woocommerce

Vulnerabilities:

10

Last Updated:

September 2, 2026

Active Installs:

60000

Published
Title
Fixed in
CVSS
Published
2026-10-09
Title
Order Export & Order Import for WooCommerce < 2.7.9 - Unauthenticated Sensitive File Exposure via Missing Directory Guard Re-verification in get_file_path()
Fixed in
Fixed in 2.7.9
CVSS
5.3 (medium)
Published
2025-10-30
Title
Order Export & Order Import for WooCommerce < 2.6.8 - Missing Authorization
Fixed in
Fixed in 2.6.8
CVSS
4.3 (medium)
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Fixed in
Fixed in 2.6.1
CVSS
4.9 (medium)
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Fixed in
Fixed in 2.6.1
CVSS
7.2 (high)
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
Fixed in
Fixed in 2.6.1
CVSS
2.7 (low)
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Fixed in
Fixed in 2.6.1
CVSS
7.6 (high)
Published
2024-05-14
Title
Order Export & Order Import for WooCommerce < 2.5.0 - Authenticated (Administrator+) PHP Object Injection
Fixed in
Fixed in 2.5.0
CVSS
7.2 (high)
Published
2024-01-10
Title
Order Export & Order Import for WooCommerce < 2.4.4 - Shop Manager+ Arbitrary File Upload
Fixed in
Fixed in 2.4.4
CVSS
7.2 (high)
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Fixed in
Fixed in 1.6.1
CVSS
n/a
Published
2016-09-19
Title
Order Export Import for WooCommerce 1.0.8 - Order Information Disclosure
Fixed in
Fixed in 1.0.9
CVSS
n/a