Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Product Import Export for WooCommerce – Import Export Product CSV Suite — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Product Import Export for WooCommerce – Import Export Product CSV Suite, with AI-generated Chinese analysis, references, and POCs.

Vendor: webtoffee

CVE IDTitleCVSSSeverityPublished
CVE-2025-1911 Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function CWE-73 2.7 Low2025-03-26
CVE-2025-1913 Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter CWE-502 7.2 High2025-03-26
CVE-2025-1912 Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function CWE-918 7.6 High2025-03-26
CVE-2025-1769 Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function CWE-22 4.9 Medium2025-03-26

All 4 known CVE vulnerabilities affecting Product Import Export for WooCommerce – Import Export Product CSV Suite with full Chinese analysis, references, and POCs where available.