← Back to CVE search

CVE-2026-48971

WebToffee Product Import Export for WooCommerce

Description

Missing Authorization vulnerability in WebToffee Product Import Export for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Product Import Export for WooCommerce: from n/a through 2.5.6.

CVSS 4.3EPSS 0.231%Risk 0.44
View source
Published
2026-05-27 14:17:33
Affected versions
<=2.5.6
Type
Installed app
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N