WebToffee Product Import Export for WooCommerce – Import Export Product CSV Suite

• CVE-2025-1913 High 7.2 Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter 0.9%
• CVE-2025-1911 Low 2.7 Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function 0.4%
• CVE-2025-1912 High 7.6 Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function 0.4%
• CVE-2025-1769 Medium 4.9 Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function 0.8%