Automated Import Products to Cart
Automated Import Products to Cart has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of November 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.
The most common weakness is Improper Limitation Of A Pathname To A Restricted Directory, behind 1 of the records (100%).
The one issue recorded for Automated Import Products to Cart has a vendor fix available, so running the current release closes it.
All of these findings were reported by Naoki Kawahigashi. The current release is tested up to WordPress 7.1.4.
CVE-2026-113617Automated Import Products to Cart <= 1.0.3 - Authenticated (Subscriber+) Arbitrary File Read
Read the full analysisVulnerability Records
Automated Import Products to Cart
Author
Atakan Au
woocommerceAdd bulk products to the shopping cart. Add the file upload form to your content using the [atakanau_woo_cart_dropfile] shortcode. Create a CSV file. Add “SKU” and “Quantity” column headers. Write the stock codes and quantities of the products you want to add to your cart. Select the file after clicking the upload form, or drag and drop the file to the upload form. Documentation, support blog and feedback: Automated Import Products to Cart Please comment 💬, rate ⭐⭐⭐⭐⭐ and share 👍. Usage Integrate the plugin’s functionality into your WordPress pages or posts using the following shortcode: [atakanau_woo_cart_dropfile]
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C