Product Import Export for WooCommerce – Import Export Product CSV Suite — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Product Import Export for WooCommerce – Import Export Product CSV Suite, with AI-generated Chinese analysis, references, and POCs.

Vendor: webtoffee

CVE ID	Title	CVSS	Severity	Published
CVE-2025-1911	Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function CWE-73	2.7	Low	2025-03-26
CVE-2025-1913	Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter CWE-502	7.2	High	2025-03-26
CVE-2025-1912	Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function CWE-918	7.6	High	2025-03-26
CVE-2025-1769	Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function CWE-22	4.9	Medium	2025-03-26

All 4 known CVE vulnerabilities affecting Product Import Export for WooCommerce – Import Export Product CSV Suite with full Chinese analysis, references, and POCs where available.