Plugin icon

Product Import Export for WooCommerce – Import Export Product CSV Suite

product-import-export-for-woo

Vulnerabilities:

7

Last Updated:

March 10, 2026

Active Installs:

90000

Published
Title
Fixed in
CVSS
Published
2025-03-25
Title
Product Import Export for WooCommerce < 2.5.1 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Fixed in
Fixed in 2.5.1
CVSS
7.2 (high)
Published
2025-03-25
Title
Product Import Export for WooCommerce < 2.5.1 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Fixed in
Fixed in 2.5.1
CVSS
7.6 (high)
Published
2025-03-25
Title
Product Import Export for WooCommerce < 2.5.1 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
Fixed in
Fixed in 2.5.1
CVSS
2.7 (low)
Published
2025-03-25
Title
Product Import Export for WooCommerce < 2.5.1 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Fixed in
Fixed in 2.5.1
CVSS
4.9 (medium)
Published
2024-03-26
Title
Product Import Export for WooCommerce < 2.4.2 - Authenticated(Shop Manager+) Arbitrary File Upload
Fixed in
Fixed in 2.4.2
CVSS
7.2 (high)
Published
2024-01-16
Title
Product Import Export for WooCommerce < 2.3.8 - Shop Manager+ Arbitrary File Upload via upload_import_file
Fixed in
Fixed in 2.3.8
CVSS
7.2 (high)
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Fixed in
Fixed in 1.7.5
CVSS
n/a