CVE-2026-94375 | Webtoffee Order Export & Order Import for WooCommerce Plugin get_file_path information disclosure

October 10, 2026 Yanac

A vulnerability has been found in Webtoffee Order Export & Order Import for WooCommerce Plugin up to 2.7.8 on WordPress and classified as problematic. This affects the function get_file_path of the component Export. This manipulation causes information disclosure.

This vulnerability appears as CVE-2026-94375. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More