CVE-2025-69129
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
The WordPress & WooCommerce Scraper plugin versions <= 1.0.7 allows unauthenticated arbitrary file uploads.
Risk Assessment
An attacker could exploit this vulnerability to upload malicious files, potentially leading to full control over the website.
Recommendation
It is recommended to update the plugin to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in WordPress & WooCommerce Scraper Plugin
See all- CVE-2025-69131High
The WordPress & WooCommerce Scraper plugin versions <= 1.0.7 allows unauthenticated arbitrary file downloads. This issue arises from improper input validation.
- CVE-2025-62088Medium
The WordPress & WooCommerce Scraper Plugin up to version 1.0.7 has a Server-Side Request Forgery (SSRF) vulnerability. This allows sending requests from the server to internal resources, which can lead to exposure of sensitive information.
Original NVD description (English source)
Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS