[ Vendor · 3 CVEs ]
webtoffee
CVEs affecting webtoffee published in the last 30 days, plus any webtoffee CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-93746 | 10 Oct 2026 | CVSS 7.5 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping LabelsThe WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object… | |
| CVE-2026-94375 | 10 Oct 2026 | CVSS 5.3 | webtoffee Order Export & Order Import for WooCommerceThe Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and… | |
| CVE-2026-97197 | 30 Sep 2026 | CVSS 7.5 | WebToffee WordPress Backup & MigrationUnauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions. |