Reycob Product Import Export
Reycob Product Import Export has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 6.6, and the most serious one scores 6.6 out of 10.
The most common weakness is Deserialization Of Untrusted Data, behind 1 of the records (100%).
The one issue recorded for Reycob Product Import Export has a vendor fix available, so running the current release closes it.
All of these findings were reported by Ananda Dhakal. The current release is tested up to WordPress 7.1.3.
CVE-2026-95603Reycob Product Import Export <= 2.3.0 - Authenticated (Shop Manager+) PHP Object Injection
Read the full analysisVulnerability Records

Reycob Product Import Export
Author
Victor Rodriguez
woocommerceReycob Product Import Export creates multipart WooCommerce backups designed for large stores. The plugin exports and imports: Users, profile data, password hashes and roles. Products, variations, prices, stock and custom metadata. Categories, tags and global attributes. Featured images, galleries and local downloadable files. Product reviews. Orders, addresses, line items, taxes, coupons, shipping, notes and refunds. Catalog, user and order backups are divided into ZIP files containing up to 100 primary records. Imports run in small background requests with progress reporting and automatic retry support. Existing products are matched by source identity or SKU. Existing users are matched by source identity, login or email. Imported orders are linked to the corresponding imported users and products. Developed by Reycob: https://reycob.com/ Privacy Backup ZIP files can contain personal customer information and password hashes. Store and transfer them securely, delete them when no longer required, and only provide them to trusted administrators. The plugin does not send data to Reycob or any external service. Active login sessions and WordPress application passwords are intentionally excluded from user exports.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C