8.0
High
CVE-2024-22152 Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This…
Description
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a through 2.3.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Product Import Export for WooCommerce 2.3 | earliest → 2.3.7 | No fix stated |
Other CVEs of Product Import Export for WooCommerce
The 4 CVEs of Product Import Export for WooCommerce →
CVE-2026-118989
WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery…
5.1
Medium
CVE-2026-48971
Missing Authorization vulnerability in WebToffee Product Import Export for WooCommerce allows Exploiting Incorrectly…
4.3
Medium
CVE-2024-30231
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This…
9.1
Critical