Advisories · Technology

extremeidea bidorbuy Store Integrator.

Every CVE that names extremeidea bidorbuy Store Integrator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-68883 CVE record

CVSS 7.1 High

WordPress bidorbuy Store Integrator plugin <= 2.12.0 - Reflected Cross Site Scripting (XSS) vulnerability
- extremeidea bidorbuy Store Integrator
- Cross-site scripting (XSS)
Not analysed yet 22 Jan 2026
CVE-2025-48100 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress bidorbuy Store Integrator plugin <= 2.12.0 - Remote Code Execution (RCE) vulnerability
- extremeidea bidorbuy Store Integrator
- Code injection
Not analysed yet 28 Aug 2025