Vanquish
Vanquish User Extra Fields: vulnerabilidades y CVE
Vanquish User Extra Fields tiene 6 vulnerabilidades publicadas, 4 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses4
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-69377 | Alta (7.7) | 0.47% | — | 20 feb 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Path Traversal.This issue affects User Extra Fields: from n/a… |
| CVE-2025-69376 | Alta (8.6) | 0.54% | — | 20 feb 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Path Traversal.This issue affects User Extra Fields: from n/a… |
| CVE-2025-67991 | Alta (7.1) | 0.18% | — | 20 feb 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Reflected XSS.This issue affects User Extra Fields: from n/a… |
| CVE-2025-67579 | Media (5.3) | 0.22% | — | 9 dic 2025 | Missing Authorization vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Extra Fields: from n/a through <=… |
| CVE-2024-11150 | Crítica (9.8) | 1.4% | — | 13 nov 2024 | The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to, and including,… |
| CVE-2024-10800 | Alta (8.8) | 0.82% | — | 13 nov 2024 | The WordPress User Extra Fields plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the ajax_save_fields() function in all versions up to, and including, 16.6. This makes it… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Vanquish
Woocommerce Customers Manager · 7Woocommerce Support Ticket System · 4Upload Files Anywhere · 2Woocommerce Orders Customers Exporter · 2Woocommerce Upload Files · 2Woocommerce Orders AND Customers Exporter · 1Woocommerce-support-ticket-system · 1Woocommerce Bulk Product Editor · 1Woocommerce Order Details · 1