CVE-2026-118989
MEDIUM
MEDIUM
Priority: 0.00
BB Relevance:
55/100
Published: 2026-10-29
Modified: 2026-10-29
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
High
UI:
None
AT:
None
VC:
Low
VI:
Low
VA:
None
Description
WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability in download_remote_file that allows shop_manager users to reach internal services via redirects. Attackers can submit a .csv URL that returns an HTTP 302 redirect to an internal address, causing the server to fetch internal responses and return them as import data.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| WebToffee | Product Import Export for WooCommerce | 2.5.1 < 2.6.8 |
| WebToffee | Product Import Export for WooCommerce | 2.5.1 < 2.6.8 |