Extendons
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WordPress & WooCommerce Scraper Plugin, Import Data from Any Site | 3 | – | Jun 17, 2026 |
| WooCommerce Registration Fields Plugin - Custom Signup Fields | 2 | – | Oct 22, 2025 |
| WooCommerce csv import export | 1 | – | Aug 28, 2025 |
Exploited and recent CVEs
- CVE-2025-69129 WordPress WordPress & WooCommerce Scraper Plugin, Import Data from Any Site plugin <= 1.0.7 - Arbitrary File Upload vulnerability 0.4%
- CVE-2025-69131 WordPress WordPress & WooCommerce Scraper Plugin, Import Data from Any Site plugin <= 1.0.7 - Arbitrary File Download vulnerability 0.5%
- CVE-2025-62088 WordPress WordPress & WooCommerce Scraper plugin, Import Data from Any Site plugin <= 1.0.7 - Server Side Request Forgery (SSRF) vulnerability 0.2%
- CVE-2025-60211 WordPress WooCommerce Registration Fields Plugin - Custom Signup Fields plugin <= 3.2.3 - Privilege Escalation vulnerability 0.4%
- CVE-2025-49947 WordPress WooCommerce Registration Fields Plugin - Custom Signup Fields plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-54029 WordPress WooCommerce csv import export Plugin <= 2.0.6 - Arbitrary File Deletion Vulnerability 0.4%