Catalog Importer, Scraper & Crawler vulnerabilities

2 known vulnerabilities in Catalog Importer, Scraper & Crawler from Idiatech. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Catalog Importer, Scraper & Crawler: Improper Control of Generation of Code

  CVE-2025-8417Sep 11, 2025Idiatech

  The Catalog Importer, Scraper & Crawler plugin for WordPress is vulnerable to PHP code injection in all versions up to, and including, 5.1.4. This is due to reliance on a guessable numeric token (e.g. ?key= 900001705) without proper authentication, combined wi

• 7.1 High severity

  Catalog Importer, Scraper & Crawler: Improper Neutralization of Input During Web Page Generation

  CVE-2025-22775Feb 3, 2025Idiatech

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in idiatech Catalog Importer, Scraper & Crawler intelligent-importer allows Reflected XSS.This issue affects Catalog Importer, Scraper & Crawler: from n/a throug