← WordPress Vulnerabilities
WordPress security by component

Store Exporter

Store Exporter is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published Nov 06, 2025; the highest CVE/CNA score is 9.8.

Plugin slug: woocommerce-exporter

CVE-2025-60203: Store Exporter: Filesystem traversal

Store Exporter is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedNov 06, 2025
Safe version guidanceSee mitigation notes
Safe version
Nov 06, 2025 CVE-2025-60203
Store Exporter: Filesystem traversal
Store Exporter is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE7.5
NVDPending
Apr 11, 2025 CVE-2025-32539
Store Exporter: Cross-site scripting
Store Exporter is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVDPending
Oct 01, 2024 CVE-2024-8793
Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More: Cross-site scripting
Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.1
NVDPending
Nov 06, 2023 CVE-2023-46822
Woocommerce Exporter: Cross-site scripting
Woocommerce Exporter is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVD6.1
Aug 27, 2019 CVE-2016-10935
Woocommerce Exporter: Privilege escalation or authentication bypass
Woocommerce Exporter is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE9.8
NVD9.8