{"id":"CVE-2026-118989","revision":"c876900dfcd54df499ecddb6d5a50659","records":[{"revision":"c876900dfcd54df499ecddb6d5a50659","observedAt":"2026-10-29T12:12:12.337+00:00","statement":{"source":"cve-program","id":"CVE-2026-118989","aliases":[],"title":"WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 SSRF via Redirects","description":"WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability in download_remote_file that allows shop_manager users to reach internal services via redirects. Attackers can submit a .csv URL that returns an HTTP 302 redirect to an internal address, causing the server to fetch internal responses and return them as import data.","state":0,"publishedAt":"2026-10-29T10:57:40.767+00:00","modifiedAt":"2026-10-29T10:57:40.767+00:00","affected":[{"ecosystem":"https://wordpress.org/plugins","name":"Product Import Export for WooCommerce","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"WebToffee\",\n                    \"product\": \"Product Import Export for WooCommerce\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"2.5.1\",\n                            \"lessThan\": \"2.6.8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"collectionURL\": \"https://wordpress.org/plugins\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","score":5.1,"severity":"MEDIUM"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","score":5.5,"severity":"MEDIUM"}],"references":["https://plugins.trac.wordpress.org/changeset/3766250/","https://plugins.trac.wordpress.org/browser/product-import-export-for-woo/tags/2.6.7/admin/modules/import/import.php#L563","https://plugins.trac.wordpress.org/browser/product-import-export-for-woo/tags/2.6.7/admin/modules/import/import.php#L661","https://wordpress.org/plugins/product-import-export-for-woo/","https://www.vulncheck.com/advisories/webtoffee-product-import-export-for-woocommerce-2.5.1-before-2.6.8-ssrf-via-redirects"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-118989","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-118989","identifiers":["CVE-2026-118989"]},"retained":false,"historicalAffected":[]}],"coverage":[]}