https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T01:24:16.352961+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-1911 CVE-2025-1911 — Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrar… 2026-10-09T01:24:16.369420+00:00

Affected: webtoffee Product Import Export for WooCommerce – Import Export Product CSV Suite

The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up to, and including, 2.5.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary log files on the server.