Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #2

SSRF vulnerability disclosed in WebToffee WooCommerce plugin

Original: 🚨 EUVD-2026-112727 📊 Score: 5.1/10 (CVSS v3.1) 📦 Product: Product Import Export for WooCommerce 🏢 Vendor: webtoffee 📅 Up

A medium-severity server-side request forgery flaw has been catalogued as EUVD-2026-112727 in WebToffee's Product Import Export for WooCommerce plugin. Versions 2.5.1 before 2.6.8 are affected, with a CVSS v3.1 score of 5.1 out of 10. Store owners using the popular plugin are being urged to update to 2.6.8 or later to close the flaw.

Why now: WordPress and WooCommerce store operators follow new vulnerability disclosures closely to decide whether they need to patch immediately.

WebToffeeProduct Import Export for WooCommerceWooCommerceEUVD

Open on mastodon →

Evidence

• 🚨 EUVD-2026-112727 📊 Score: 5.1/10 (CVSS v3.1) 📦 Product: Product Import Export for WooCommerce 🏢 Vendor: webtoffee 📅 Updated: 2026-10-29 📝 WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability in… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4114215