Known Vulnerabilities for products from Soflyy
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Soflyy".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-49038 json | Not Provided | 2025-08-14 | 2026-04-23 | |
| CVE-2024-31939 json | Not Provided | 2024-04-10 | 2026-04-28 | |
| CVE-2024-31390 json | Not Provided | 2024-04-03 | 2026-04-28 | |
| CVE-2023-7082 json | 7.2 - HIGH | 2024-01-22 | 2024-01-26 | |
| CVE-2023-6938 json | The Oxygen Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom field in all versions up to... | Not Provided | 2024-01-11 | 2026-04-08 |
| CVE-2022-46841 json | Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Oxygen Builder plugin <= 4.4 versions. | 8.8 - HIGH | 2023-10-03 | 2023-10-04 |
| CVE-2022-36386 json | Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin <= 3.6.7 at Wor... | 7.2 - HIGH | 2022-09-21 | 2022-09-23 |
| CVE-2022-3418 json | The Import any XML or CSV File to WordPress plugin before 3.6.9 is not properly filtering which file extensions are allowed t... | 7.2 - HIGH | 2022-11-07 | 2022-11-09 |
| CVE-2022-3395 json | The WP All Export Pro WordPress plugin before 1.7.9 uses the contents of the cc_sql POST parameter directly as a database que... | 8.8 - HIGH | 2022-10-25 | 2022-10-26 |
| CVE-2022-3394 json | The WP All Export Pro WordPress plugin before 1.7.9 does not limit some functionality during exports only to users with the A... | 7.2 - HIGH | 2022-10-25 | 2022-10-26 |
| CVE-2022-2711 json | The Import any XML or CSV File to WordPress plugin before 3.6.9 is not validating the paths of files contained in uploaded zi... | 7.2 - HIGH | 2022-11-07 | 2022-11-09 |
| CVE-2022-2268 json | The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip file... | 7.2 - HIGH | 2022-07-04 | 2022-11-05 |
| CVE-2022-1800 json | The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when exportin... | 7.2 - HIGH | 2022-06-13 | 2023-12-20 |
| CVE-2021-24714 json | The Import any XML or CSV File to WordPress plugin before 3.6.3 does not escape the Import's Title and Unique Identifier fiel... | 4.8 - MEDIUM | 2021-12-06 | 2021-12-06 |
| CVE-2018-20978 json | The wp-all-import plugin before 3.4.7 for WordPress has XSS. | 6.1 - MEDIUM | 2019-08-20 | 2019-08-21 |
| CVE-2018-16259 json | ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_l... | 6.1 - MEDIUM | 2019-04-12 | 2023-11-07 |
| CVE-2018-16258 json | ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-import custom_type. N... | 6.1 - MEDIUM | 2019-04-12 | 2023-11-07 |
| CVE-2018-16257 json | ** DISPUTED ** There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress via action=template. NOTE: ... | 6.1 - MEDIUM | 2019-04-12 | 2023-11-07 |
| CVE-2018-16256 json | ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add Filtering Options(Add Rule).... | 6.1 - MEDIUM | 2019-04-12 | 2023-11-07 |
| CVE-2018-16255 json | ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate. NOTE: The vendo... | 6.1 - MEDIUM | 2019-04-12 | 2023-11-07 |
Known software with vulnerabilities from Soflyy
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Soflyy | Wp All Import | 2.12 |