Skip to content
OpenAdvisories

Vendor

idiatech

2 known vulnerabilities.

Products

Catalog Importer, Scraper & Crawler 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2025-8417

    Catalog Importer, Scraper & Crawler <= 5.1.4 - Unauthenticated PHP Code Injection

    The Catalog Importer, Scraper & Crawler plugin for WordPress is vulnerable to PHP code injection in all versions up to, and including, 5.1.4. This is due to reliance on a guessable numeric token (e.g. ?key= 900001705) without proper authentication, combined w…

    idiatech Catalog Importer, Scraper & Crawler Web / CMS
  • High 7.1
    CVE-2025-22775

    WordPress Catalog Importer, Scraper & Crawler Plugin <= 5.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in idiatech Catalog Importer, Scraper & Crawler intelligent-importer allows Reflected XSS.This issue affects Catalog Importer, Scraper & Crawler: from n/a throu…

    idiatech Catalog Importer, Scraper & Crawler