Store Toolkit for WooCommerce – Boost WooCommerce with useful tools, nuking/deleting, reports, order filters & more!, CVE-2025-60204

CVE, Research URL: CVE-2025-60204
Home page URL: Security reports for Store Toolkit for WooCommerce – Boost WooCommerce with useful tools, nuking/deleting, reports, order filters & more!
Application: Store Toolkit for WooCommerce – Boost WooCommerce with useful tools, nuking/deleting, reports, order filters & more!
Published on: Nov 06, 2025
Research Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Josh Kohlbach WooCommerce Store Toolkit woocommerce-store-toolkit allows PHP Local File Inclusion.This issue affects WooCommerce Store Toolkit: from n/a through <= 2.4.3.
Affected versions: max 2.4.3.
Status: vulnerable

Store Toolkit for WooCommerce – Boost WooCommerce with useful tools, nuking/deleting, reports, order filters &amp; more!, CVE-2025-60204