Product Import Export for WooCommerce <= 2.5.0 - 经过身份验证 (管理员+) 的 validate_file 函数中的服务器端请求伪造 (Server-Side Request Forgery)

The SSRF vulnerability allows an authenticated administrator to craft malicious requests that originate from the WordPress application. This can be exploited to query internal services that are not directly accessible from the outside world, potentially exposing sensitive data or allowing attackers to interact with internal systems. For example, an attacker could attempt to access internal APIs, database management interfaces, or other administrative panels. The impact is amplified by the plugin's popularity and widespread use in e-commerce environments, potentially affecting a large number of online stores. Successful exploitation could lead to data breaches, unauthorized access to internal resources, and even complete compromise of the web server.

E-commerce businesses using WordPress and the Product Import Export for WooCommerce plugin are at risk. Specifically, sites running versions 1.0.0 through 2.5.0 are vulnerable. Shared hosting environments where plugin updates are managed by the hosting provider may be particularly susceptible if they haven't applied the update.

• wordpress / composer / npm:

grep -r 'validate_file()' /var/www/html/wp-content/plugins/product-import-export-for-woocommerce/

• generic web:

curl -I https://your-wordpress-site.com/wp-content/plugins/product-import-export-for-woocommerce/ | grep Server

• wordpress / composer / npm:

wp plugin list | grep 'Product Import Export for WooCommerce'

• wordpress / composer / npm:

wp plugin update product-import-export-for-woocommerce

1. 2025-03-26Disclosure

   disclosure

1. 已保留2025-03-03
2. 发布日期2025-03-26
3. 修改日期2026-04-08
4. EPSS 更新日期2026-03-23

The primary mitigation for CVE-2025-1912 is to upgrade the Product Import Export for WooCommerce plugin to version 2.5.4 or later. If upgrading is not immediately feasible due to compatibility issues or breaking changes, consider temporarily restricting access to the plugin's import/export functionality to trusted users only. Web Application Firewalls (WAFs) can be configured to block suspicious outbound requests originating from the plugin, specifically those targeting internal IP addresses or unusual domains. Monitor WordPress access logs for unusual outbound requests originating from the plugin’s files. After upgrading, confirm the fix by attempting to trigger the vulnerable function with a known malicious URL and verifying that the request is blocked or handled safely.

活跃安装数

90K已知

插件评分

4.6

需要WordPress版本

3.0+

兼容至

6.9.4

需要PHP版本

5.6+