CVE-2024-54262

CVE-2024-54262 CVE-2024-54262 익스플로잇: Import Export for WooCommerce의 임의 파일 업로드 개요 이 스크립트는 WordPress 플러그인 "Import Export for WooCommerce"의 취약점을 악용합니다. 이 취약점은 인증되지 않은 사용자가 임의의 파일을 업로드하여 잠재적인 원격 코드 실행RCE으로 이어질 수 있게 합니다. 기능: 버전 탐지 : WordPress 사이트가 취약한 플러그인 버전을 실행 중인지 자동으로 확인합니다. 인증 : 추가 악용을 위한 WordPre...

CVE-2026-32441: Missing Authorization

Missing Authorization vulnerability in WebToffee Comments Import & Export comments-import-export-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Comments Import & Export: from n/a through = 2.4.9...

WordPress Import Export For WooCommerce plugin <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update vulnerability

Missing Authorization to Authenticated Subscriber+ Settings Update vulnerability discovered by Legion Hunter in WordPress Plugin Import Export For WooCommerce versions = 1.6.2...

CVE-2025-12389 Import Export For WooCommerce <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The Import Export For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updatesetting function in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with Subscriber-level access a...

PT-2025-17167 · WordPress · Wpfactory Product Excel Import Export & Bulk Edit For Woocommerce

Name of the Vulnerable Software and Affected Versions: WPFactory Product Excel Import Export & Bulk Edit for WooCommerce versions n/a through 4.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows...

WordPress Import Export For WooCommerce plugin <= 1.6.2 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Import Export For WooCommerce versions = 1.6.2...