CVE-2026-22480: Webtoffee Product Feed For Woocommerce

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Object Injection.This issue affects Product Feed for WooCommerce: from n/a through <= 2.3.3.

Affected products

• Webtoffee Product Feed For Woocommerce: up to and including 2.3.3

Published 2026-03-25. Last modified 2026-06-17.