Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: extendons Clear all filters
TI-2025-38411 CVE-2025-62088 · GHSA-5xm8-3p95-whj7

Server-side request forgery in extendons WordPress & WooCommerce Scraper Plugin, Import…

Priority LOW 24

Server-Side Request Forgery (SSRF) vulnerability in extendons WordPress & WooCommerce Scraper Plugin, Import Data from Any Site wp_scraper allows Server Side Request Forgery.This issue affects WordPress & WooCommerce Scr…

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00193 Published 2025-12-31 No fix listed CWE-918
TI-2025-37577 CVE-2025-60211 · GHSA-4rpr-5rmh-668h

WordPress WooCommerce Registration Fields Plugin - Custom Signup Fields plugin <= 3.2.3…

Priority MEDIUM 40

Incorrect Privilege Assignment vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Privilege Escalation.This issue affects WooCommerce Registratio…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00391 Published 2025-10-22 No fix listed CWE-266
TI-2025-31862 CVE-2025-49947 · GHSA-mg44-32v7-gm39

Cross-site scripting in extendons WooCommerce Registration Fields Plugin - Custom Signup…

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Reflected…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00279 Published 2025-10-22 No fix listed CWE-79
TI-2025-33874 CVE-2025-54029 · GHSA-mfgx-whfp-c32c

WordPress WooCommerce csv import export Plugin <= 2.0.6 - Arbitrary File Deletion Vulnerability

Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in extendons WooCommerce csv import export extendons-eo-wooimport-export allows Path Traversal.This issue affects WooCommerce c…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00384 Published 2025-08-28 No fix listed CWE-22