https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13923.htmlhttps://patchthecve.com/cve/CVE-2024-13923.htmlWed, 17 Jun 2026 07:03:00 +0000HIGH 7.6: The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.6.0 via the validate_file() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web rhttps://patchthecve.com/cve/CVE-2024-13922.htmlhttps://patchthecve.com/cve/CVE-2024-13922.htmlWed, 17 Jun 2026 07:02:59 +0000LOW 2.7: The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up to, and including, 2.6.0. This makes it possible for authenticated attackers, with Administrator-https://patchthecve.com/cve/CVE-2024-13921.htmlhttps://patchthecve.com/cve/CVE-2024-13921.htmlWed, 17 Jun 2026 07:02:59 +0000HIGH 7.2: The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.0 via deserialization of untrusted input from the 'form_data' parameter. This makes it possible for authenticated attackers, with Administrator-level ahttps://patchthecve.com/cve/CVE-2024-13920.htmlhttps://patchthecve.com/cve/CVE-2024-13920.htmlWed, 17 Jun 2026 07:02:59 +0000MEDIUM 4.9: The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.6.0 via the download_file() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents