Approved changes feed: RSS · Atom

cpe:2.3:a:webtoffee:product_import_export_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWebtoffee (e4f96395-4c7d-5ae2-a626-a2bd0042f0d9)
ProductProduct Import Export For Woocommerce (fc4c1a09-4fdb-58d9-87d2-7e8e42adc206)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/webtoffee/product-reviews-import-export-for-woocommerce purl2cpe 2026-06-01 10:14:35.281522

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-48971 vulnerable 2026-06-03 15:26:24.038042 WordPress Product Import Export for WooCommerce plugin <= 2.5.6 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in WebToffee Product Import Export for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Product Import Export for WooCommerce: from n/a through 2.5.6.
Published: 2026-05-27T11:53:24.538Z
Updated: 2026-05-27T14:38:19.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30231 vulnerable 2026-06-03 14:55:37.574174 WordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerability
CRITICAL (9.1)
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a through 2.4.1.
Published: 2024-03-26T11:57:59.743Z
Updated: 2026-04-28T16:09:22.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22152 vulnerable 2026-06-03 14:54:59.876008 WordPress Product Import Export for WooCommerce Plugin <= 2.3.7 is vulnerable to Arbitrary File Upload
HIGH (8)
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a through 2.3.7.
Published: 2024-01-24T11:48:56.237Z
Updated: 2026-04-28T16:09:08.795Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.