CVEs we hold for Webtoffee
Records whose assigning authority named Webtoffee as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-49056WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.9.4 - Sensitive Data…WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery…
CVE-2026-48971WordPress Product Import Export for WooCommerce plugin <= 2.5.6 - Broken Access Control vulnerabilityWebToffee Product Import Export for WooCommerce
CVE-2026-45438WordPress Smart Coupons for WooCommerce plugin < 2.3.0 - Broken Access Control vulnerabilityWebToffee Smart Coupons for WooCommerce
CVE-2026-32441WordPress Comments Import & Export plugin <= 2.4.9 - Broken Access Control vulnerabilityWebToffee Comments Import & Export
CVE-2026-22480WordPress Product Feed for WooCommerce plugin <= 2.3.3 - PHP Object Injection vulnerabilityWebToffee Product Feed for WooCommerce
CVE-2026-18027WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated…WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery…
CVE-2026-13389WebToffee Cookie Consent < 3.5.3 - Consent Log Disclosure/Deletion, Page Creation & License Deactivation via…Unknown webtoffee-cookie-consent
CVE-2025-67599WordPress WebToffee eCommerce Marketing Automation plugin <= 2.1.1 - Broken Access Control vulnerabilityWebToffee eCommerce Marketing Automation
CVE-2025-66112WordPress Accessibility Toolkit by WebYes plugin <= 2.0.4 - Broken Access Control vulnerabilityWebToffee Accessibility Toolkit by WebYes
CVE-2025-66089WordPress Product Feed for WooCommerce plugin <= 2.3.1 - Broken Access Control vulnerabilityWebToffee Product Feed for WooCommerce
CVE-2025-64382WordPress Order Export & Order Import for WooCommerce plugin <= 2.6.7 - Broken Access Control vulnerabilityWebToffee Order Export & Order Import for WooCommerce
CVE-2025-64358WordPress Smart Coupons for WooCommerce plugin <= 2.2.3 - Broken Access Control vulnerabilityWebToffee Smart Coupons for WooCommerce
CVE-2025-49287WordPress Product Feed for WooCommerce plugin <= 2.2.8 - Broken Access Control VulnerabilityWebToffee Product Feed for WooCommerce
CVE-2025-3919WordPress Comments Import & Export <= 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site…webtoffee Comments Import & Export
CVE-2025-24657WordPress Wishlist for WooCommerce plugin <=2.1.2 - Cross Site Scripting (XSS) vulnerabilityWebToffee Wishlist for WooCommerce
CVE-2025-24651WordPress WebToffee WP Backup and Migration plugin <= 1.5.3 - Sensitive Data Exposure vulnerabilityWebToffee WordPress Backup & Migration
CVE-2025-24644WordPress WooCommerce PDF Invoices plugin <= 4.7.1 - Stored Cross Site Scripting (XSS) vulnerabilityWebToffee WooCommerce PDF Invoices, Packing Slips, Delivery…
CVE-2025-1973Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited…webtoffee Export and Import Users and Customers
CVE-2025-1972Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited…webtoffee Export and Import Users and Customers
CVE-2025-1971Export and Import Users and Customers <= 2.6.2 - Authenticated (Admin+) PHP Object Injection via form_data Parameterwebtoffee Export and Import Users and Customers
CVE-2025-1970Export and Import Users and Customers <= 2.6.2 - Authenticated (Administrator+) Server-Side Request Forgery via…webtoffee Export and Import Users and Customers
CVE-2025-1913Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameterwebtoffee Product Import Export for WooCommerce – Import…
CVE-2025-1912Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Administrator+) Server-Side Request Forgery via…webtoffee Product Import Export for WooCommerce – Import…
CVE-2025-1911Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited…webtoffee Product Import Export for WooCommerce – Import…
CVE-2025-1769Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited…webtoffee Product Import Export for WooCommerce – Import…
CVE-2025-12113Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images <= 1.8.3 - Missing Authorization to…webtoffee Alt Text Generator AI – Auto Generate & Bulk…
CVE-2024-8397GDPR Cookie Consent <= 2.6.0 - Unauthenticated Stored XSSUnknown webtoffee-gdpr-cookie-consent
CVE-2024-8286GDPR Cookie Consent <= 2.6.0 - Bulk Delete via CSRFUnknown webtoffee-gdpr-cookie-consent
CVE-2024-7514WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversalwebtoffee Comments Import & Export
CVE-2024-3546WordPress Backup & Migration <= 1.4.8 - Missing Authorization to Directory TraversalWebToffee WP Backup and Migration
CVE-2024-34751WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerabilityWebToffee Order Export & Order Import for WooCommerce
CVE-2024-32835WordPress Export and Import Users and Customers plugin <= 2.5.3 - Deserialization of untrusted data vulnerabilityWebToffee Import Export WordPress Users
CVE-2024-32834WordPress WooCommerce Shipping Label plugin <= 2.3.8 - Cross Site Scripting (XSS) vulnerabilityWebToffee WooCommerce Shipping Label
CVE-2024-3216WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to…WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery…
CVE-2024-31254WordPress WordPress Backup & Migration plugin <= 1.4.7 - Sensitive Data Exposure via Log File vulnerabilityWebToffee WordPress Backup & Migration
CVE-2024-31235WordPress Comments Import & Export plugin <= 2.3.5 - Cross Site Request Forgery (CSRF) vulnerabilityWebToffee WordPress Comments Import & Export
CVE-2024-30492WordPress Export and Import Users and Customers plugin <= 2.5.2 - Path Traversal vulnerabilityWebToffee Import Export WordPress Users
CVE-2024-30231WordPress Product Import Export for WooCommerce plugin <= 2.4.1 - Arbitrary File Upload vulnerabilityWebToffee Product Import Export for WooCommerce
CVE-2024-22288WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.4.0 - Reflected Cross…WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery…
CVE-2024-22152WordPress Product Import Export for WooCommerce Plugin <= 2.3.7 is vulnerable to Arbitrary File UploadWebToffee Product Import Export for WooCommerce
CVE-2024-22135WordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File UploadWebToffee Order Export & Order Import for WooCommerce
CVE-2024-13923Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via…webtoffee Order Export & Order Import for WooCommerce
CVE-2024-13922Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited…webtoffee Order Export & Order Import for WooCommerce
CVE-2024-13921Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Admin+) PHP Object Injection via form_data…webtoffee Order Export & Order Import for WooCommerce
CVE-2024-13920Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited…webtoffee Order Export & Order Import for WooCommerce
CVE-2024-0957WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.1 - Unauthenticated Stored…WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery…
CVE-2023-7068WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.3.0 - Missing Authorization to Order…WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery…
CVE-2023-6558Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Uploadwebtoffee Export and Import Users and Customers
CVE-2023-52183WordPress WordPress Backup & Migration plugin <= 1.4.3 - Broken Access Control vulnerabilityWebToffee WordPress Backup & Migration
CVE-2023-51546WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.2.1 - Privilege…WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery…
CVE-2023-48284WordPress Decorator – WooCommerce Email Customizer Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)WebToffee Decorator – WooCommerce Email Customizer
CVE-2023-45636WordPress Backup & Migration plugin <= 1.4.1 - Broken Access Control vulnerabilityWebToffee WordPress Backup & Migration
CVE-2023-3459Export and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User…webtoffee Export and Import Users and Customers
CVE-2023-33928WordPress WordPress Backup & Migration plugin <= 1.4.0 - Broken Access Control vulnerabilityWebToffee WordPress Backup & Migration
CVE-2022-46802WordPress Product Reviews Import Export for WooCommerce Plugin <= 1.4.8 is vulnerable to CSV InjectionWebToffee Product Reviews Import Export for WooCommerce
CVE-2022-45370WordPress WordPress Comments Import & Export Plugin <= 2.3.1 is vulnerable to CSV InjectionWebToffee WordPress Comments Import & Export
57 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.