Approved changes feed: RSS · Atom

cpe:2.3:a:webtoffee:webtoffee_ecommerce_marketing_automation:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWebtoffee (e4f96395-4c7d-5ae2-a626-a2bd0042f0d9)
ProductWebtoffee Ecommerce Marketing Automation (92495fba-f78e-54a9-a02f-3eaf882e681a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-67599 vulnerable 2026-06-03 15:11:01.899168 WordPress WebToffee eCommerce Marketing Automation plugin <= 2.1.1 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in WebToffee WebToffee eCommerce Marketing Automation decorator-woocommerce-email-customizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebToffee eCommerce Marketing Automation: from n/a through <= 2.1.1.
Published: 2025-12-09T14:14:19.262Z
Updated: 2026-04-28T19:24:54.480Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.