Skip to content
PluginCanary

Product Import Export for WooCommerce

by WebToffee · 80,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: released 9 days ago, tested with WordPress 7.1, no open vulnerabilities.

87/ 100Healthy
Canary Score

Based on 4 of 5 areas

Sub-scores for Product Import Export for WooCommerce
Ownership100
Maintenance100
Security65
SupportNo data
Reputation85

How the score works

Active signals

Open issues right now, with links to the source.

  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 8 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is Product Import Export for WooCommerce still maintained?
Yes. Last release 26 Oct 2026, 21 releases in the last 24 months. 26 Oct 2026 · wordpress.org
Who owns Product Import Export for WooCommerce, and has it changed hands?
No change recorded. Main committer webtoffee since Jul 2018. 4 Nov 2026 · SVN log
Was Product Import Export for WooCommerce removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Product Import Export for WooCommerce safe?
8 known vulnerabilities, all fixed (latest in 2.5.7). Not on the exploited list. 27 May 2026 · Wordfence Intelligence
Is the latest Product Import Export for WooCommerce update safe to install?
No ownership change before 2.6.8. No one-star spike after it. 26 Oct 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
webtoffee9 Jul 2018 to 26 Oct 2026, 141 commits

1 committer recorded. No ownership changes recorded since 2016.

Maintenance

Last release
9 days ago
Releases, 24 months
21
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for Product Import Export for WooCommerce
Q1 20244
Q2 20241
Q3 20242
Q4 20243
Q1 20252
Q2 20253
Q3 20252
Q4 20253
Q1 20263
Q2 20263
Q3 20262
Q4 20261

Last release 26 Oct 2026. Tested with WordPress 7.1 (current).

Support

Resolved, last 2 months
100%
Threads, last 2 months
1

Trend appears after 8 weekly snapshots.

Security record

5 vulnerabilities in 24 months (8 on record), all patched (latest fixed in 2.5.7).

Show 8 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
27 May 2026Missing Authorization4.3<= 2.5.62.5.7Before disclosure
25 Mar 2025Authenticated (Admin+) PHP Object Injection via form_data Parameter7.2<= 2.5.02.5.1Before disclosure
25 Mar 2025Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function7.6<= 2.5.02.5.1Before disclosure
25 Mar 2025Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function2.7<= 2.5.02.5.1Before disclosure
25 Mar 2025Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function4.9<= 2.5.02.5.1Before disclosure
26 Mar 2024Authenticated(Shop Manager+) Arbitrary File Upload7.2<= 2.4.12.4.2Before disclosure
16 Jan 2024Authenticated(Shop Manager+) Arbitrary File Upload via upload_import_file7.2<= 2.3.72.3.8Before disclosure
11 Mar 2020Missing Authorization to CSV Import4.3< 1.7.51.7.5Before disclosure

Changelog mentions of security fixes: 2.6.4 (vulnerability).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.6.

Last 90 days vs lifetime average rating for Product Import Export for WooCommerce
Last 90 days5.0
Lifetime4.6
Average rating per quarter
Average rating per quarter for Product Import Export for WooCommerce
Q1 20254.5
Q2 20254.8
Q3 20255.0
Q4 20254.9
Q1 20265.0
Q2 20263.0
Q4 20265.0

Average rating rose from 4.5 to 5.0 between Q1 2025 and Q4 2026.

Rating distribution
5 star358
4 star16
3 star5
2 star11
1 star24
Latest low reviews

Momentum

Active installs
80,000+
Downloads, last full week
29,803
Weekly downloads, last 26 complete weeks
Weekly downloads for Product Import Export for WooCommerce
4 May 20266,528
11 May 20268,082
18 May 20269,358
25 May 202628,097
1 Jun 20268,271
8 Jun 20265,607
15 Jun 20264,151
22 Jun 202626,275
29 Jun 20266,676
6 Jul 20268,418
13 Jul 20264,036
20 Jul 20264,091
27 Jul 20263,457
3 Aug 20263,104
10 Aug 202630,050
17 Aug 20266,494
24 Aug 20265,046
31 Aug 202625,325
7 Sep 20267,366
14 Sep 20267,971
21 Sep 20265,673
28 Sep 20264,114
5 Oct 20263,432
12 Oct 20263,108
19 Oct 20263,797
26 Oct 202629,803

Weekly downloads over the last 4 weeks are 1% above the 26-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

WP All ImportScore 95 · 20,000+WP All ExportScore 95 · 10,000+Advanced Order Export For WooCommerceScore 91 · 100,000+

Facts

Full name
Product Import Export for WooCommerce - CSV Product Importer & Exporter
Version
2.6.8
Author
WebToffee
Added
14 Apr 2016
Last updated
26 Oct 2026
Active installs
80,000+
Requires WordPress
3.0
Tested up to
7.1.4
Requires PHP
5.6
Category
E-commerce & Shopping
Tags
product export, product import, CSV import export, woocommerce product import, export woocommerce products

Other plugins by this author: Sequential Order Number for WooCommerce, Order Export & Order Import for, Export and Import Users and Customers, WebToffee WooCommerce PDF Invoices, Smart Coupons For WooCommerce Coupons, Related Products, WebToffee eCommerce Marketing Automation, WebToffee WP Backup and Migration, mPDF add-on for RTL and Unicode Support, WebToffee WooCommerce Product Feeds, Comments Import & Export, WebToffee EU Order Withdrawal Button for

Questions about Product Import Export for WooCommerce

Is Product Import Export for WooCommerce still maintained?

Yes. Last release 26 Oct 2026, 21 releases in the last 24 months.

Who owns Product Import Export for WooCommerce, and has it changed hands?

No change recorded. Main committer webtoffee since Jul 2018.

Was Product Import Export for WooCommerce removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Product Import Export for WooCommerce safe?

8 known vulnerabilities, all fixed (latest in 2.5.7). Not on the exploited list.

Is the latest Product Import Export for WooCommerce update safe to install?

No ownership change before 2.6.8. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue