CVE-2026-48971

Missing Authorization vulnerability in WebToffee Product Import Export for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Product Import Export for WooCommerce: from n/a through 2.5.6.

Score

CVSS 3.1 4.3 Medium

Status

Deferred - audit@patchstack.com

Published

2026-05-27

Last modified

2026-10-26

Weaknesses

CWE-862

Affected products

• Product Import Export For Woocommerce (Webtoffee)

References

• https://patchstack.com/database/wordpress/plugin/product-import-export-for-woo/vulnerability/wordpress-product-import-e…