Skip to contentWebtoffee Export And Import Users And Customers vulnerabilities
- webtoffee export and import users and customersExport and Import Users and Customers <= 2.7.5 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via Biographical Info FieldCVE-2026-1043688.8 High
- webtoffee export and import users and customers, import export wordpress users +1 moreExport and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file FunctionCVE-2025-19734.9 Medium
- webtoffee export and import users and customers, import export wordpress users +1 moreExport and Import Users and Customers <= 2.6.2 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file FunctionCVE-2025-19707.6 High
- webtoffee export and import users and customers, import export wordpress users +1 moreExport and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page FunctionCVE-2025-19722.7 Low
- webtoffee export and import users and customers, import export wordpress users +1 moreExport and Import Users and Customers <= 2.6.2 - Authenticated (Admin+) PHP Object Injection via form_data ParameterCVE-2025-19717.2 High
- webtoffee export and import users and customers, import export wordpress users +1 moreExport and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File UploadCVE-2023-65587.2 High
- webtoffee export and import users and customers, import export wordpress users +1 moreExport and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password ChangeCVE-2023-34597.2 High