Read the docs

woocommerce-csvimport

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

woocommerce-csvimport records in CISA KEV

No woocommerce-csvimport vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2018-15550 CVE-2018-25325 · GHSA-5435-6h24-vmqj

Woocommerce CSV Importer 3.3.6 Path Traversal File Deletion

Priority HIGH 77

Woocommerce CSV Importer 3.3.6 contains a path traversal vulnerability that allows any registered user to delete arbitrary files by submitting unescaped filenames through the delete_export_file AJAX action.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00613 Published 2026-05-17 No fix listed CWE-22
Open these records in search →