Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: sidngr Clear all filters
TI-2025-11366 CVE-2025-12389 · GHSA-25qp-vg38-c324

Import Export For WooCommerce <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update

Priority LOW 19

The Import Export For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_setting() function in all versions up to, and including, 1.6.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00201 Published 2025-11-04 No fix listed CWE-862
TI-2024-36351 CVE-2024-54262 · GHSA-p2rq-8crm-mpff

WordPress Import Export For WooCommerce plugin <= 1.6.2 - Arbitrary File Upload vulnerability

Priority MEDIUM 46

Unrestricted Upload of File with Dangerous Type vulnerability in sidngr Import Export For WooCommerce import-export-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Import Export For WooCommer…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01471 Published 2024-12-13 No fix listed CWE-434