https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1913.htmlhttps://patchthecve.com/cve/CVE-2025-1913.htmlWed, 17 Jun 2026 08:40:19 +0000HIGH 7.2: The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.5.0 via deserialization of untrusted input from the 'form_data' parameter This makes it possible for authenticated attackers,https://patchthecve.com/cve/CVE-2025-1912.htmlhttps://patchthecve.com/cve/CVE-2025-1912.htmlWed, 17 Jun 2026 08:40:19 +0000HIGH 7.6: The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the validate_file() Function. This makes it possible for authenticated attackers, with Administrator-level acchttps://patchthecve.com/cve/CVE-2025-1911.htmlhttps://patchthecve.com/cve/CVE-2025-1911.htmlWed, 17 Jun 2026 08:40:19 +0000LOW 2.7: The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up to, and including, 2.5.0. This makes it possible for authenticated athttps://patchthecve.com/cve/CVE-2025-1769.htmlhttps://patchthecve.com/cve/CVE-2025-1769.htmlWed, 17 Jun 2026 08:39:44 +0000MEDIUM 4.9: The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.0 via the download_file() function. This makes it possible for authenticated attackers, with Administrator-level access and