Product Import Export for WooCommerce

Authenticated (Admin+) PHP Object Injection via form_data Parameter vulnerability <= 2.5.0

Authenticated (Administrator+) ServerSide Request Forgery via validate_file Function vulnerability <= 2.5.0

Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function vulnerability <= 2.5.0

Arbitrary File Upload vulnerability <= 2.4.1

Arbitrary File Upload vulnerability <= 2.3.7