Extendons vulnerabilities
We track 3 vulnerabilities in Extendons products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2025.
Latest Extendons vulnerabilities
- 8.8 High severity
WooCommerce Registration Fields Plugin -…: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Privilege Escalation.This issue affects WooCommerce Registration Fields Plugin - Custom Signup Fields:
- 7.1 High severity
WooCommerce Registration Fields Plugin -…: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Reflected XSS.This issue affects WooCommerce Regi
- 7.7 High severity
WooCommerce csv import export: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in extendons WooCommerce csv import export extendons-eo-wooimport-export allows Path Traversal.This issue affects WooCommerce csv import export: from n/a through <= 2.