Vulnerabilidades en Extendons
6 resultadosAnálisis Vexday
Extendons apresenta uma vulnerabilidade crítica (CVSS) relacionada a upload de arquivo sem validação adequada (CWE-434), publicada recentemente (últimos 90 dias). Embora não haja sinais de exploração ativa registrada, a natureza crítica e a recência da flaw exigem atenção imediata para mitigação.
CVE-2025-69131HIGHWordPress WordPress & WooCommerce Scraper Plugin, Import Data from Any Site plugin <= 1.0.7 - Arbitrary File Download vulnerabilityEPSS 0.5%CVE-2025-69129CRITICALWordPress WordPress & WooCommerce Scraper Plugin, Import Data from Any Site plugin <= 1.0.7 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2025-54029HIGHWordPress WooCommerce csv import export Plugin <= 2.0.6 - Arbitrary File Deletion VulnerabilityEPSS 0.4%CVE-2025-60211HIGHWordPress WooCommerce Registration Fields Plugin - Custom Signup Fields plugin <= 3.2.3 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2025-49947HIGHWordPress WooCommerce Registration Fields Plugin - Custom Signup Fields plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-62088MEDIUMWordPress WordPress & WooCommerce Scraper plugin, Import Data from Any Site plugin <= 1.0.7 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%