WebToffee Order Export & Order Import for WooCommerce

• CVE-2026-94375 Medium 5.3 Order Export & Order Import for WooCommerce <= 2.7.8 - Unauthenticated Sensitive File Exposure via Missing Directory Guard Re-verification in get_file_path() 0.3%
• CVE-2025-64382 Medium 4.3 WordPress Order Export & Order Import for WooCommerce plugin <= 2.6.7 - Broken Access Control vulnerability 0.2%
• CVE-2024-13920 Medium 4.9 Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function 0.8%
• CVE-2024-13921 High 7.2 Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter 0.7%
• CVE-2024-13922 Low 2.7 Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function 0.4%
• CVE-2024-13923 High 7.6 Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function 0.4%
• CVE-2024-34751 Medium 4.4 WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability 0.2%
• CVE-2024-22135 High 8.0 WordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File Upload 0.5%