CVE-2025-69129

Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.

Score

CVSS 3.1 10.0 Critical

Status

Deferred - audit@patchstack.com

Published

2026-06-17

Last modified

2026-10-06

Weaknesses

CWE-434

Affected products

• Import Data From Any Site (Extendons)
• Wordpress Woocommerce Scraper Plugin (Extendons)

References

• https://patchstack.com/database/wordpress/plugin/wp_scraper/vulnerability/wordpress-wordpress-woocommerce-scraper-plugi…