{"cve":"CVE-2025-62088","enrichment":{"created":"2026-01-05T10:15:30.941143+00:00","updated":"2026-04-29T17:45:16.606668+00:00","vendors":["extendons","extendons$PRODUCT$wordpress_&_woocommerce_scraper_plugin","wordpress","wordpress$PRODUCT$wordpress"]},"epss":{"score":0.00196},"mitre":{"cpes":[],"created":"2025-12-31T17:04:44.038000+00:00","description":"Server-Side Request Forgery (SSRF) vulnerability in extendons WordPress & WooCommerce Scraper Plugin, Import Data from Any Site wp_scraper allows Server Side Request Forgery.This issue affects WordPress & WooCommerce Scraper Plugin, Import Data from Any Site: from n/a through <= 1.0.7.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"},"cvssV4_0":{}},"mitre_repo_path":"cves/2025/62xxx/CVE-2025-62088.json","references":["https://patchstack.com/database/Wordpress/Plugin/wp_scraper/vulnerability/wordpress-wordpress-woocommerce-scraper-plugin-import-data-from-any-site-plugin-1-0-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve"],"title":"WordPress WordPress & WooCommerce Scraper plugin, Import Data from Any Site plugin <= 1.0.7 - Server Side Request Forgery (SSRF) vulnerability","updated":"2026-04-28T16:14:01.252000+00:00","vendors":[],"weaknesses":["CWE-918"]},"nvd":{"cpes":[],"created":"2025-12-31T17:15:45.577000+00:00","description":"Server-Side Request Forgery (SSRF) vulnerability in extendons WordPress & WooCommerce Scraper Plugin, Import Data from Any Site wp_scraper allows Server Side Request Forgery.This issue affects WordPress & WooCommerce Scraper Plugin, Import Data from Any Site: from n/a through <= 1.0.7.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"},"cvssV4_0":{}},"nvd_repo_path":"2025/CVE-2025-62088.json","references":["https://patchstack.com/database/Wordpress/Plugin/wp_scraper/vulnerability/wordpress-wordpress-woocommerce-scraper-plugin-import-data-from-any-site-plugin-1-0-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve"],"title":null,"updated":"2026-09-23T17:10:00.210000+00:00","vendors":[],"weaknesses":["CWE-918"]},"opencve":{"changes":[{"created":"2025-12-31T17:15:00+00:00","data":[{"details":{"new":"Server-Side Request Forgery (SSRF) vulnerability in extendons WordPress & WooCommerce Scraper Plugin, Import Data from Any Site allows Server Side Request Forgery.This issue affects WordPress & WooCommerce Scraper Plugin, Import Data from Any Site: from n/a through 1.0.7.","old":null},"type":"description"},{"details":{"new":"WordPress WordPress & WooCommerce Scraper plugin, Import Data from Any Site plugin <= 1.0.7 - Server Side Request Forgery (SSRF) vulnerability","old":null},"type":"title"},{"details":{"added":["CWE-918"],"removed":[]},"type":"weaknesses"},{"details":{"added":["https://vdp.patchstack.com/database/wordpress/plugin/wp_scraper/vulnerability/wordpress-wordpress-woocommerce-scraper-plugin-import-data-from-any-site-plugin-1-0-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve"],"removed":[]},"type":"references"},{"details":{"added":{"cvssV3_1":{"score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"2b30e963-f05b-4a01-b3cd-5319eb15054b"},{"created":"2025-12-31T18:15:00+00:00","data":[{"details":{"added":{"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"1143935a-5c25-417a-8582-a66ed4bede44"},{"created":"2026-01-05T10:45:00+00:00","data":[{"details":["extendons","extendons$PRODUCT$wordpress_&_woocommerce_scraper_plugin","wordpress","wordpress$PRODUCT$wordpress"],"type":"first_time"},{"details":{"added":["extendons","extendons$PRODUCT$wordpress_&_woocommerce_scraper_plugin","wordpress","wordpress$PRODUCT$wordpress"],"removed":[]},"type":"vendors"}],"id":"007e267b-c0d9-437e-98c1-0f05b8368819"},{"created":"2026-01-20T14:45:00+00:00","data":[{"details":{"added":["https://patchstack.com/database/wordpress/plugin/wp_scraper/vulnerability/wordpress-wordpress-woocommerce-scraper-plugin-import-data-from-any-site-plugin-1-0-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve"],"removed":[]},"type":"references"}],"id":"88f97b96-a58f-45a0-8b3f-5c7847239dd6"},{"created":"2026-01-20T15:30:00+00:00","data":[{"details":{"added":[],"removed":["https://vdp.patchstack.com/database/wordpress/plugin/wp_scraper/vulnerability/wordpress-wordpress-woocommerce-scraper-plugin-import-data-from-any-site-plugin-1-0-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve"]},"type":"references"}],"id":"2fef0b38-a3fb-4a83-a37a-c29c775b6cdf"},{"created":"2026-04-01T23:45:00+00:00","data":[{"details":{"new":"Server-Side Request Forgery (SSRF) vulnerability in extendons WordPress & WooCommerce Scraper Plugin, Import Data from Any Site wp_scraper allows Server Side Request Forgery.This issue affects WordPress & WooCommerce Scraper Plugin, Import Data from Any Site: from n/a through <= 1.0.7.","old":"Server-Side Request Forgery (SSRF) vulnerability in extendons WordPress & WooCommerce Scraper Plugin, Import Data from Any Site allows Server Side Request Forgery.This issue affects WordPress & WooCommerce Scraper Plugin, Import Data from Any Site: from n/a through 1.0.7."},"type":"description"},{"details":{"added":["https://patchstack.com/database/Wordpress/Plugin/wp_scraper/vulnerability/wordpress-wordpress-woocommerce-scraper-plugin-import-data-from-any-site-plugin-1-0-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve"],"removed":["https://patchstack.com/database/wordpress/plugin/wp_scraper/vulnerability/wordpress-wordpress-woocommerce-scraper-plugin-import-data-from-any-site-plugin-1-0-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve"]},"type":"references"},{"details":{"added":{},"removed":{"cvssV3_1":{"score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"}},"updated":{}},"type":"metrics"}],"id":"aef119bf-05c9-4e9d-bf4e-19411cf91aeb"},{"created":"2026-04-23T15:00:00+00:00","data":[{"details":{"added":{"cvssV3_1":{"score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"dac45187-64be-4b38-b755-24954b1d8360"}],"cpes":{"data":[],"providers":[]},"created":{"data":"2025-12-31T17:04:44.038000+00:00","provider":"mitre"},"description":{"data":"Server-Side Request Forgery (SSRF) vulnerability in extendons WordPress & WooCommerce Scraper Plugin, Import Data from Any Site wp_scraper allows Server Side Request Forgery.This issue affects WordPress & WooCommerce Scraper Plugin, Import Data from Any Site: from n/a through <= 1.0.7.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.00196},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://patchstack.com/database/Wordpress/Plugin/wp_scraper/vulnerability/wordpress-wordpress-woocommerce-scraper-plugin-import-data-from-any-site-plugin-1-0-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve"],"providers":["mitre","nvd"]},"title":{"data":"WordPress WordPress & WooCommerce Scraper plugin, Import Data from Any Site plugin <= 1.0.7 - Server Side Request Forgery (SSRF) vulnerability","provider":"mitre"},"updated":{"data":"2026-04-23T15:34:31.047000+00:00","provider":"nvd"},"vendors":{"data":["extendons","extendons$PRODUCT$wordpress_&_woocommerce_scraper_plugin","wordpress","wordpress$PRODUCT$wordpress"],"providers":["enrichment"]},"weaknesses":{"data":["CWE-918"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2025-12-31T17:04:44.038000+00:00","description":"Server-Side Request Forgery (SSRF) vulnerability in extendons WordPress & WooCommerce Scraper Plugin, Import Data from Any Site allows Server Side Request Forgery.This issue affects WordPress & WooCommerce Scraper Plugin, Import Data from Any Site: from n/a through 1.0.7.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"references":[],"title":"WordPress WordPress & WooCommerce Scraper plugin, Import Data from Any Site plugin <= 1.0.7 - Server Side Request Forgery (SSRF) vulnerability","updated":"2025-12-31T17:32:44.582000+00:00","vendors":[],"vulnrichment_repo_path":"2025/62xxx/CVE-2025-62088.json","weaknesses":[]}}