Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Order Export & Order Import for WooCommerce — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Order Export & Order Import for WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: WebToffee

CVE IDTitleCVSSSeverityPublished
CVE-2025-64382 WordPress Order Export & Order Import for WooCommerce plugin <= 2.6.7 - Broken Access Control vulnerability CWE-862 9.1 -2025-11-13
CVE-2024-13921 Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter CWE-502 7.2 High2025-03-20
CVE-2024-13920 Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function CWE-22 4.9 Medium2025-03-20
CVE-2024-13922 Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function CWE-73 2.7 Low2025-03-20
CVE-2024-13923 Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function CWE-918 7.6 High2025-03-20
CVE-2024-34751 WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability CWE-502 4.4 Medium2024-05-16
CVE-2024-22135 WordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File Upload CWE-434 8.0 High2024-01-24

All 7 known CVE vulnerabilities affecting Order Export & Order Import for WooCommerce with full Chinese analysis, references, and POCs where available.