CVE Tools
Track your stack

Order Export & Order Import For Woocommerce

8 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Order Export & Order Import For Woocommerce, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Order Export & Order Import For Woocommerce CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Order Export & Order Import For Woocommerce CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-034
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-111
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-101

Severity

How the 8 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • High338%
  • Medium450%
  • Low113%

Latest CVEs

The 8 most recently published vulnerabilities affecting Order Export & Order Import For Woocommerce.

  1. CVE-2026-94375Order Export & Order Import for WooCommerce <= 2.7.8 - Unauthenticated Sensitive File Exposure via Missing Directory Guard Re-verification in get_file_path()5.3
  2. CVE-2025-64382WordPress Order Export & Order Import for WooCommerce plugin <= 2.6.7 - Broken Access Control vulnerability4.3
  3. CVE-2024-13920Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function4.9
  4. CVE-2024-13921Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter7.2
  5. CVE-2024-13922Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function2.7
  6. CVE-2024-13923Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function7.6
  7. CVE-2024-34751WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability4.4
  8. CVE-2024-22135WordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File Upload8.0

Product grouping is registry-driven, with AI assist and human review. How it works