Path Traversal Vulnerability in Extendons WooCommerce CSV Import Export
CVE-2025-54029

7.7HIGH

Key Information:

Vendor

WordPress
Status
WooCommerce Csv Import Export
Vendor
CVE Published:
28 August 2025

What is CVE-2025-54029?

The Extendons WooCommerce CSV Import Export plugin suffers from a Path Traversal vulnerability, which allows an attacker to exploit the system by manipulating input data. Specifically, this weakness enables unauthorized access to the filesystem, giving the potential for arbitrary file deletion or disclosure of sensitive information. It is imperative for users of affected versions to update their software to mitigate risks associated with this vulnerability.

Affected Version(s)

WooCommerce csv import export <= 2.0.6

References

https://patchstack.com/database/wordpress/plugin/extendon...
vdb-entry

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0xd4rk5id3 (Patchstack Alliance)
.
CVE-2025-54029 : Path Traversal Vulnerability in Extendons WooCommerce CSV Import Export