Product Import Export for WooCommerce – Import Export Product CSV Suite vulnerabilities

2 known vulnerabilities in Product Import Export for WooCommerce – Import Export Product CSV Suite from WebToffee. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Product Import Export for WooCommerce – Import…: Deserialization of Untrusted Data

  CVE-2025-1913Mar 26, 2025WebToffee

  The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.5.0 via deserialization of untrusted input from the 'form_data' parameter This makes

• 7.6 High severity

  Product Import Export for WooCommerce – Import…: Server-Side Request Forgery

  CVE-2025-1912Mar 26, 2025WebToffee

  The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the validate_file() Function. This makes it possible for authenticated