4.3
Medium
CVE-2026-48971 Missing Authorization vulnerability in WebToffee Product Import Export for WooCommerce allows Exploiting Incorrectly…
Description
Missing Authorization vulnerability in WebToffee Product Import Export for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Product Import Export for WooCommerce: from n/a through 2.5.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Product Import Export for WooCommerce 2.5 | earliest → 2.5.6 | No fix stated |
Other CVEs of Product Import Export for WooCommerce
The 4 CVEs of Product Import Export for WooCommerce →
CVE-2026-118989
WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery…
5.1
Medium
CVE-2024-30231
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This…
9.1
Critical
CVE-2024-22152
Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This…
8.0
High