Read the docs

extendons

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

extendons records in CISA KEV

No extendons vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-37577 CVE-2025-60211 · GHSA-4rpr-5rmh-668h

WordPress WooCommerce Registration Fields Plugin - Custom Signup Fields plugin <= 3.2.3…

Priority MEDIUM 40

Incorrect Privilege Assignment vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Privilege Escalation.This issue affects WooCommerce Registratio…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00391 Published 2025-10-22 No fix listed CWE-266
TI-2025-33874 CVE-2025-54029 · GHSA-mfgx-whfp-c32c

WordPress WooCommerce csv import export Plugin <= 2.0.6 - Arbitrary File Deletion Vulnerability

Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in extendons WooCommerce csv import export extendons-eo-wooimport-export allows Path Traversal.This issue affects WooCommerce c…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00384 Published 2025-08-28 No fix listed CWE-22
TI-2025-31862 CVE-2025-49947 · GHSA-mg44-32v7-gm39

Cross-site scripting in extendons WooCommerce Registration Fields Plugin - Custom Signup…

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Reflected…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00279 Published 2025-10-22 No fix listed CWE-79
TI-2025-38411 CVE-2025-62088 · GHSA-5xm8-3p95-whj7

Server-side request forgery in extendons WordPress & WooCommerce Scraper Plugin, Import…

Priority LOW 24

Server-Side Request Forgery (SSRF) vulnerability in extendons WordPress & WooCommerce Scraper Plugin, Import Data from Any Site wp_scraper allows Server Side Request Forgery.This issue affects WordPress & WooCommerce Scr…

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00193 Published 2025-12-31 No fix listed CWE-918
Open these records in search →