CVE-2026-16777

Name of the Vulnerable Software and Affected Versions The Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers versions prior to 2.8.1

Description A Directory Traversal issue exists where authenticated attackers with shop manager-level access or higher can read arbitrary files on the server. This is achieved by manipulating the filename parameter, potentially exposing sensitive information. Directory Traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder.

Recommendations Update the plugin to a version newer than 2.8.0. Avoid using the filename parameter until the update is applied.