CVE-2026-118989
WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 SSRF via Redirects
CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th
WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability in download_remote_file that allows shop_manager users to reach internal services via redirects. Attackers can submit a .csv URL that returns an HTTP 302 redirect to an internal address, causing the server to fetch internal responses and return them as import data.
| CWE | CWE-918 |
| Vendor | webtoffee |
| Product | product import export for woocommerce |
| Published | Oct 29, 2026 |
| Last Updated | Oct 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for webtoffee product import export for woocommerce
Be the first to know when new medium vulnerabilities affecting webtoffee product import export for woocommerce are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
WebToffee / Product Import Export for WooCommerce
2.5.1 < 2.6.8
References
plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/changeset/3766250/ plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/product-import-export-for-woo/tags/2.6.7/admin/modules/import/import.php#L563 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/product-import-export-for-woo/tags/2.6.7/admin/modules/import/import.php#L661 wordpress.org: https://wordpress.org/plugins/product-import-export-for-woo/ vulncheck.com: https://www.vulncheck.com/advisories/webtoffee-product-import-export-for-woocommerce-2.5.1-before-2.6.8-ssrf-via-redirects
Credits
Sarvar Eshboyev