Known Vulnerabilities for products from Soflyy
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Soflyy".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-49038 | Not Provided | 2025-08-14 | 2026-04-01 | |
| CVE-2023-7082 | 7.2 - HIGH | 2024-01-22 | 2024-01-26 | |
| CVE-2022-46841 | Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Oxygen Builder plugin <= 4.4 versions. | 8.8 - HIGH | 2023-10-03 | 2023-10-04 |
| CVE-2022-36386 | Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin <= 3.6.7 at Wor... | 7.2 - HIGH | 2022-09-21 | 2022-09-23 |
| CVE-2022-3418 | The Import any XML or CSV File to WordPress plugin before 3.6.9 is not properly filtering which file extensions are allowed t... | 7.2 - HIGH | 2022-11-07 | 2022-11-09 |
| CVE-2022-3395 | The WP All Export Pro WordPress plugin before 1.7.9 uses the contents of the cc_sql POST parameter directly as a database que... | 8.8 - HIGH | 2022-10-25 | 2022-10-26 |
| CVE-2022-3394 | The WP All Export Pro WordPress plugin before 1.7.9 does not limit some functionality during exports only to users with the A... | 7.2 - HIGH | 2022-10-25 | 2022-10-26 |
| CVE-2022-2711 | The Import any XML or CSV File to WordPress plugin before 3.6.9 is not validating the paths of files contained in uploaded zi... | 7.2 - HIGH | 2022-11-07 | 2022-11-09 |
| CVE-2022-2268 | The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip file... | 7.2 - HIGH | 2022-07-04 | 2022-11-05 |
| CVE-2022-1800 | The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when exportin... | 7.2 - HIGH | 2022-06-13 | 2023-12-20 |
| CVE-2021-24714 | The Import any XML or CSV File to WordPress plugin before 3.6.3 does not escape the Import's Title and Unique Identifier fiel... | 4.8 - MEDIUM | 2021-12-06 | 2021-12-06 |
| CVE-2018-20978 | The wp-all-import plugin before 3.4.7 for WordPress has XSS. | 6.1 - MEDIUM | 2019-08-20 | 2019-08-21 |
| CVE-2018-16259 | ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_l... | 6.1 - MEDIUM | 2019-04-12 | 2023-11-07 |
| CVE-2018-16258 | ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-import custom_type. N... | 6.1 - MEDIUM | 2019-04-12 | 2023-11-07 |
| CVE-2018-16257 | ** DISPUTED ** There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress via action=template. NOTE: ... | 6.1 - MEDIUM | 2019-04-12 | 2023-11-07 |
| CVE-2018-16256 | ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add Filtering Options(Add Rule).... | 6.1 - MEDIUM | 2019-04-12 | 2023-11-07 |
| CVE-2018-16255 | ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate. NOTE: The vendo... | 6.1 - MEDIUM | 2019-04-12 | 2023-11-07 |
| CVE-2018-16254 | ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=options. NOTE: The vendor... | 6.1 - MEDIUM | 2019-04-12 | 2023-11-07 |
| CVE-2018-0547 | Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.7 for WordPress allows an attacker to inject ... | 6.1 - MEDIUM | 2018-03-09 | 2018-03-28 |
| CVE-2018-0546 | Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.6 for WordPress allows an attacker to inject ... | 6.1 - MEDIUM | 2018-03-09 | 2018-03-28 |
Known software with vulnerabilities from Soflyy
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Soflyy | Wp All Import | 2.12 |