WebToffee

Records69All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

WebToffee records in CISA KEV

No WebToffee vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Import Export Wordpress Users 8 records MEDIUM Product Import Export For Woocommerce 6 records MEDIUM Woocommerce Pdf Invoices, Packing Slips, Delivery Notes And Shipping Labels 6 records LOW Order Export & Order Import For Woocommerce 5 records LOW Backup And Migration 3 records LOW Stripe Payment Plugin For Woocommerce 3 records MEDIUM Gdpr Cookie Consent 2 records MEDIUM Wordpress Comments Import And Export 2 records MEDIUM

Records

2 records in Wordpress Comments Import And Export · all components

TI-2022-22336 CVE-2022-45370 · GHSA-2c28-wpp9-3fwq

WordPress WordPress Comments Import & Export Plugin <= 2.3.1 is vulnerable to CSV Injection

MEDIUM 50

Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress Comments Import & Export: from n/a through 2.3.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00847 Published 2023-11-07 No fix listed CWE-1236

TI-2018-08241 CVE-2018-11526 · GHSA-c2pm-8q3x-vjgf

The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection.

MEDIUM 42

The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.04962 Published 2018-06-19 No fix listed CWE-1236

Open these records in search →

Critical	5
High	24
Medium	40
Low	0
No CVSS	0