Skip to content
Sign in
7.2 High

CVE-2026-22480 Deserialization of Untrusted Data vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed…

Description

Deserialization of Untrusted Data vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Object Injection.This issue affects Product Feed for WooCommerce: from n/a through <= 2.3.3.

Affected products and versions

Product Affected versions Fixed in
Product Feed for WooCommerce 2.3 earliest → 2.3.3 No fix stated

Other CVEs of Product Feed for WooCommerce

The 3 CVEs of Product Feed for WooCommerce →
CVE-2025-66089 Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting… 4.3 Medium CVE-2025-49287 Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting… 4.3 Medium
Track this CVE