Skip to content
Sign in
4.3 Medium

CVE-2025-66089 Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting…

Description

Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Feed for WooCommerce: from n/a through <= 2.3.1.

Affected products and versions

Product Affected versions Fixed in
Product Feed for WooCommerce 2.3 earliest → 2.3.1 No fix stated

Other CVEs of Product Feed for WooCommerce

The 3 CVEs of Product Feed for WooCommerce →
CVE-2026-22480 Deserialization of Untrusted Data vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed… 7.2 High CVE-2025-49287 Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting… 4.3 Medium
Track this CVE