Visser develops a focused line of WooCommerce extensions and plugins for e-commerce functionality, including store exporters, product importers, and checkout management tools that operate within WordPress environments. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and frequently acquire public exploit code, with recurring exposure centering on cross-site scripting and unrestricted file-upload weaknesses that are endemic to web-facing WordPress plugins. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Visser over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-0149MEDIUM The WooCommerce Stored Exporter WordPress plugin before 2.7.1 was affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the woo_ce admin page. | Feb 7, 2022 | 6.1 | 32 | NO | YES |
CVE-2016-10935CRITICAL The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation. | Aug 27, 2019 | 9.8 | 31 | NO | NO |
CVE-2016-10923CRITICAL The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation. | Aug 22, 2019 | 9.8 | 30 | NO | NO |
CVE-2016-10922CRITICAL The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation. | Aug 22, 2019 | 9.8 | 27 | NO | NO |
CVE-2022-1546MEDIUM The WooCommerce - Product Importer WordPress plugin through 1.5.2 does not sanitise and escape the imported data before outputting it back in the page, leading to a Reflected Cross | Jul 11, 2022 | 6.1 | 24 | NO | NO |
CVE-2019-11807HIGH The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=update_attachment_wccm wccm_default_keys_load paramete | May 6, 2019 | 7.5 | 24 | NO | NO |
CVE-2021-25077MEDIUM The Store Toolkit for WooCommerce WordPress plugin before 2.3.2 does not sanitise and escape the tab parameter before outputting it back in an admin page in an error message, leadi | Feb 7, 2022 | 6.1 | 21 | NO | NO |
CVE-2023-46822MEDIUM Unauth. Reflected Cross-Site Scripting') vulnerability in Visser Labs Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin <= 2.7. | Nov 6, 2023 | 6.1 | 20 | NO | NO |
CVE-2024-8793MEDIUM The Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the | Oct 1, 2024 | 6.1 | 19 | NO | NO |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Visser.
Media articles that mention a CVE ID that affects a product developed by Visser — matched by CVE ID, not by vendor name.