BFG Tools – Extension Zipper

Explore BFG Tools – Extension Zipper vulnerabilities across all versions. Currently tracking 1 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

4.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all BFG Tools – Extension Zipper vulnerabilities before they are exploited.

Vulnerability Records

1 records


2026-02-13 14:25	BFG Tools – Extension Zipper <= 1.0.7 - Authenticated (Administrator+) Path Traversal via 'first_file' Parameter BFG Tools <= 1.0.7	`CVE-2025-13681`	4.9 Medium	Itthidej Aramsri (Boeing777)	Yes

Showing 1–1 of 1 reports

Latestv1.0.8

BFG Tools – Extension Zipper

Author

Joby Franczek

0.0(0)

0/100

Last Updated

2025-12-06 (8mo ago)

Active Installs

Downloads

367

Requires WP

6.0+

Requires PHP

7.4+

Tested up to

WP 6.9.5

Created

2025-11-22 (8mo ago)

The BFG Tools – Extension Zipper lets you create on-demand ZIP files of any installed WordPress plugin directly from the admin dashboard. Perfect for backups, migrating plugins between sites, sending code to a developer, or archiving a working version before updates. All ZIP files are generated safely using PHP’s ZipArchive and saved to /wp-content/uploads/extension-zips/. Learn more or get support here: https://thebaldfatguy.com/wordpress-plugins/extension-zipper/ Features Lists every installed plugin with a “Create ZIP” button Saves ZIPs to a safe writable directory (uploads/extension-zips) Automatically names ZIPs using plugin name + version Includes a download link for the latest build Skips junk files (node_modules, .git, .DS_Store, vendor/bin, logs, etc.) Fully WP-org guideline compatible (unique prefix, safe path handling, nonces, etc.)

View on WordPress.org