Skip to contentWebtoffee vulnerabilities
Newest
- webtoffee woocommerce pdf invoices, packing slips, delivery notes & shipping labels, woocommerce pdf invoices\, packing slips\, delivery notes and shipping labels +1 moreWooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings ResetCVE-2024-32165.3 Medium
- webtoffee import export wordpress usersWordPress Export and Import Users and Customers plugin <= 2.5.2 - Path Traversal vulnerabilityCVE-2024-304924.3 Medium
- webtoffee woocommerce pdf invoices, packing slips, delivery notes and shipping labels, woocommerce pdf invoices\, packing slips\, delivery notes and shipping labels +1 moreWordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.4.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-222887.1 High
- webtoffee product import export for woocommerceWordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerabilityCVE-2024-302319.1 Critical
- webtoffee woocommerce pdf invoices, packing slips, delivery notes & shipping labels, woocommerce pdf invoices\, packing slips\, delivery notes and shipping labels +1 moreWooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.1 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-09576.1 Medium
- webtoffee order export & order import for woocommerce, order export \& order import for woocommerce +1 moreWordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File UploadCVE-2024-221358.0 High
- webtoffee product import export for woocommerceWordPress Product Import Export for WooCommerce Plugin <= 2.3.7 is vulnerable to Arbitrary File UploadCVE-2024-221528.0 High
- webtoffee stripe payment plugin for woocommerce, themehigh payment gateway of stripe for woocommerce +1 moreStripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL InjectionCVE-2024-07059.8 Critical
- webtoffee export and import users and customers, import export wordpress users +1 moreExport and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File UploadCVE-2023-65587.2 High
- webtoffee woocommerce pdf invoices, packing slips, delivery notes & shipping labels, woocommerce pdf invoices\, packing slips\, delivery notes and shipping labels +1 moreWooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.3.0 - Missing Authorization to Order ExportCVE-2023-70684.3 Medium
- webtoffee decorator, decorator – woocommerce email customizer +1 moreWordPress Decorator – WooCommerce Email Customizer Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-482844.3 Medium
- unknown wordpress backup & migration, webtoffee backup and migration +1 moreWordPress Backup & Migration < 1.4.5 - Subscriber+ Stored XSSCVE-2023-57385.4 Medium
- unknown wordpress backup & migration, webtoffee backup and migration +1 moreWordPress Backup & Migration < 1.4.4 - Subscriber+ Plugin Settings UpdateCVE-2023-57374.3 Medium
- webtoffee wordpress comments import & export, wordpress comments import and export +1 moreWordPress WordPress Comments Import & Export Plugin <= 2.3.1 is vulnerable to CSV InjectionCVE-2022-453706.1 Medium
- webtoffee product reviews import export for woocommerceWordPress Product Reviews Import Export for WooCommerce Plugin <= 1.4.8 is vulnerable to CSV InjectionCVE-2022-468026.1 Medium
- webtoffee stripe payment plugin for woocommerce, themehigh payment gateway of stripe for woocommerce +1 moreStripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication BypassCVE-2023-31629.8 Critical
- webtoffee stripe payment plugin for woocommerceThe Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized...CVE-2023-40405.3 Medium
- webtoffee export and import users and customers, import export wordpress users +1 moreExport and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password ChangeCVE-2023-34597.2 High
- webtoffee import export wordpress usersThe users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows...CVE-2020-120748.8 High
- webtoffee import export wordpress usersThe webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress...CVE-2019-15092Public exploit7.3 High
- webtoffee wordpress comments import and exportThe plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable...CVE-2018-11526Public exploit7.8 High