GSheet For Woo Importer
GSheet For Woo Importer has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for GSheet For Woo Importer has a vendor fix available, so running the current release closes it.
All of these findings were reported by Legion Hunter. GSheet For Woo Importer is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2026-4843GSheet For Woo Importer <= 2.3.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Reset
Read the full analysisVulnerability Records
GSheet For Woo Importer
Author
OlegApanovich
This is a wordpress plugin that extends standard woocommerce import products functionality and lets you import, not only from a local file, but also from your google sheet file, which you store on your google drive and can be edited by any member of your store team. Standard woocommerce import, which was introduced by woocommerce team since version 3.1, became a greater plugin feature that lets you not use additional plugins and extensions for product import processes. However, if it’s a pain every time when you’re loading csv import files from your local machine, then this plugin is a great choice that lets you not do it anymore. Just set it once, and in the future you will only have to press the button “Import” as usual. The plugin itself will pull the new data from the specified google sheet table. Full instruction about plugin setup options you can find on our github plugin page.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C