WordPress plugin
WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer: common questions
Does WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer: 2 medium. None are known to affect version null.
How do I check which version of WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer vulnerability?
CVE-2025-67599, published Oct 30, 2025: WebToffee eCommerce Marketing Automation <= 2.1.1 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer vulnerability listed in CISA KEV?
No. None of the known WebToffee eCommerce Marketing Automation – Email marketing, Popups, Email customizer vulnerabilities is currently listed in the CISA KEV catalog.