extendons

Security Risk Profile

/100

medium

Security Risk Score

Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from August 28, 2025 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

7.3

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

50/100

medium

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

SSRF

XSS

Path Traversal

Most Affected Products

1. extendons WooCommerce Registration Fields Plugin - Custom Signup Fields2

2. WordPress WooCommerce Registration Fields Plugin - Custom Signup Fields2

3. Extendons WordPress & WooCommerce Scraper Plugin, Import Data from Any Site1

4. extendons WooCommerce csv import export1

Recent Vulnerabilities

See more →

CVE-2025-62088

CVSS 5.4medium

WordPress WordPress & WooCommerce Scraper plugin, Import Data from Any Site plugin <= 1.0.7 - Server Side Request Forgery (SSRF) vulnerability

Dec 31, 2025🔧 No Patch

CVE-2025-60211

CVSS 8.8high

WordPress WooCommerce Registration Fields Plugin - Custom Signup Fields plugin <= 3.2.3 - Privilege Escalation vulnerability

Oct 22, 2025🔧 No Patch

CVE-2025-49947

CVSS 7.1high

WordPress WooCommerce Registration Fields Plugin - Custom Signup Fields plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability

Oct 22, 2025🔧 No Patch

CVE-2025-54029

CVSS 7.7high

WordPress WooCommerce csv import export Plugin <= 2.0.6 - Arbitrary File Deletion Vulnerability

Aug 28, 2025🔧 No Patch

Monitor extendons in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Start Free Trial Book a Demo