WordPress plugin
WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium3
- Low0
All WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.6 | Authenticated (Shop manager+) PHP Object Injection ≤2.3.3Update to 2.3.4 | CVE-2026-22480 | |
| Medium4.3 | Missing Authorization ≤2.3.1Update to 2.3.2 | CVE-2025-66089 | |
| Medium4.3 | Missing Authorization ≤2.2.8Update to 2.2.9 | CVE-2025-49287 |
- Medium6.6Authenticated (Shop manager+) PHP Object Injection
≤2.3.3Update to 2.3.4
- Medium4.3Missing Authorization
≤2.3.1Update to 2.3.2
- Medium4.3Missing Authorization
≤2.2.8Update to 2.2.9
WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More: common questions
Does WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More: 3 medium. None are known to affect version null.
How do I check which version of WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More vulnerability?
CVE-2026-22480, published Mar 5, 2026: WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More <= 2.3.3 - Authenticated (Shop manager+) PHP Object Injection. Severity: Medium (CVSS 6.6).
Is any WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More vulnerability listed in CISA KEV?
No. None of the known WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More vulnerabilities is currently listed in the CISA KEV catalog.