VULNERABILITY INTELLIGENCE

CVE-2025-49287

CVSS score4.3 MEDIUM

EPSS probability0.31%

CISA KEVNot currently listed

Published2025-06-06

Last modified2026-06-17

Description

Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Feed for WooCommerce: from n/a through <= 2.2.8.