Skip to content

Soflyy vulnerabilities

Products

Newest

breakdance WordPress Breakdance plugin < 2.7 - Broken Access Control vulnerability CVE-2026-65551 7.5 HighAugust 6, 2026
breakdance WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-57735 7.1 HighJuly 23, 2026
soflyy wp all import, wp all import all import +1 more WordPress WP All Import plugin <= 4.0.1 - SQL Injection vulnerability CVE-2026-57628 7.6 HighJune 26, 2026
soflyy wp wizard cloak WordPress WP Wizard Cloak Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability CVE-2025-53237 7.1 HighFebruary 20, 2026
soflyy wp all export – drag & drop export to any custom csv, xml & excel WP All Export <= 1.4.14 - Unauthenticated Sensitive Information Exposure via PHP Type Juggling CVE-2026-1582 3.7 LowFebruary 18, 2026
soflyy wp dynamic links WordPress WP Dynamic Links plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-49038 7.1 HighAugust 14, 2025
soflyy wp all export, unknown wp all export pro, wp all import all export pro +2 more WP All Export Pro <= 1.9.1 - Authenticated (ShopManager+) Arbtirary Options Update CVE-2024-7425 6.8 MediumFebruary 7, 2025
soflyy wp all import pro WP All Import Pro <= 4.9.7 - Cross-Site Request Forgery to Imported Content Deletion CVE-2024-9661 4.3 MediumFebruary 7, 2025
soflyy wp all export, unknown wp all export pro, wp all import all export pro +2 more WP All Export Pro <= 1.9.1 - Unauthenticated Remote Code Execution via Custom Export Fields CVE-2024-7419 8.3 HighFebruary 7, 2025
soflyy wp all import pro, wp all import +1 more WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) PHP Object Injection via Import File CVE-2024-9664 7.2 HighFebruary 7, 2025
soflyy wp all import pro WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-8722 5.5 MediumJanuary 19, 2025
soflyy wp all import pro WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import CVE-2024-9624 7.6 HighDecember 17, 2024
breakdance Breakdance <= 1.7.2 - Missing Authorization CVE-2024-5331 4.3 MediumAugust 1, 2024
breakdance Breakdance <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-5330 6.4 MediumAugust 1, 2024
oxygen builder builder, soflyy oxygen +1 more Oxygen Builder <= 4.8.2 - Authenticated (Contributor+) Remote Code Execution CVE-2024-4662 8.8 HighMay 23, 2024
soflyy import any xml or csv file to wordpress WordPress Import any XML or CSV File to WordPress plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31939 4.3 MediumApril 10, 2024
oxygen builder builder, soflyy oxygen, oxygen builder +2 more WordPress Oxygen plugin <= 4.9 - Authenticated Remote Code Execution (RCE) vulnerability CVE-2024-31380 9.9 CriticalApril 3, 2024
breakdance WordPress Breakdance plugin <= 1.7.2 - Authenticated Remote Code Execution (RCE) vulnerability CVE-2024-31390 9.9 CriticalApril 3, 2024
unknown import any xml or csv file to wordpress, soflyy export any wordpress data to xml\/csv +1 more WP All Import < 3.7.3 - Admin+ Arbitrary File Upload to RCE CVE-2023-7082 7.2 HighJanuary 22, 2024
oxygen builder builder, soflyy oxygen +1 more Oxygen Builder <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field CVE-2023-6938 6.4 MediumJanuary 11, 2024
soflyy wp all export, unknown export any wordpress data to xml/csv, wp all export pro +1 more +3 more WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRF CVE-2023-5882 8.8 HighDecember 18, 2023
soflyy wp all export, unknown export any wordpress data to xml/csv, wp all export pro +1 more +3 more WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE CVE-2023-4724 7.2 HighDecember 18, 2023
soflyy wp all export, unknown export any wordpress data to xml/csv, wp all export pro +1 more +3 more WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRF CVE-2023-5886 8.8 HighDecember 18, 2023
oxygen builder builder, soflyy oxygen, oxygen builder +2 more WordPress Oxygen Builder Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-46841 5.4 MediumOctober 3, 2023
soflyy wp all import, unknown import any xml or csv file to wordpress +1 more WP All Import < 3.6.9 - Admin+ Arbitrary File Upload to RCE CVE-2022-3418 7.2 HighNovember 7, 2022
soflyy wp all import, unknown import any xml or csv file to wordpress +1 more WP All Import < 3.6.9 - Admin+ Directory traversal via file upload CVE-2022-2711 7.2 HighNovember 7, 2022
soflyy wp all export, unknown wp all export pro +1 more WP All Export Pro < 1.7.9 - Authenticated SQLi CVE-2022-3395 8.8 HighOctober 25, 2022
soflyy wp all export, unknown wp all export pro +1 more WP All Export Pro < 1.7.9 - Authenticated Code Injection CVE-2022-3394 7.2 HighOctober 25, 2022
soflyy import any xml or csv file to wordpress (wordpress plugin), wp all import +1 more WordPress Import any XML or CSV File to WordPress plugin <= 3.6.7 - Authenticated Arbitrary Code Execution vulnerability CVE-2022-36386 9.1 CriticalSeptember 21, 2022
soflyy wp all import, unknown import any xml or csv file to wordpress +1 more WP All Import < 3.6.8 - Admin+ Arbitrary File Upload CVE-2022-2268 7.2 HighJuly 4, 2022
unknown export any wordpress data to xml/csv, soflyy export any wordpress data to xml\/csv +1 more Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection CVE-2022-1800 7.2 HighJune 13, 2022
soflyy wp all import, unknown import any xml or csv file to wordpress +1 more WP All Import < 3.6.3 - Admin+ Stored Cross-Site Scripting CVE-2021-24714 4.8 MediumDecember 6, 2021
soflyy wp all import The wp-all-import plugin before 3.4.7 for WordPress has XSS. CVE-2018-20978 6.1 MediumAugust 20, 2019
soflyy wp all import The wp-all-import plugin before 3.4.6 for WordPress has XSS. CVE-2017-18567 6.1 MediumAugust 20, 2019
soflyy wp all import The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS. CVE-2015-9329 6.1 MediumAugust 20, 2019
soflyy wp all import The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection. CVE-2015-9330 9.8 CriticalAugust 20, 2019
soflyy wp all import The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests... CVE-2015-9331 7.5 HighAugust 20, 2019
soflyy wp all import ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi... CVE-2018-16259 Disputed 6.1 MediumApril 12, 2019
soflyy wp all import ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi... CVE-2018-16258 Disputed 6.1 MediumApril 12, 2019
soflyy wp all import ** DISPUTED ** There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress... CVE-2018-16257 Disputed 6.1 MediumApril 12, 2019
soflyy wp all import ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add... CVE-2018-16256 Disputed 6.1 MediumApril 12, 2019
soflyy wp all import ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via... CVE-2018-16255 Disputed 6.1 MediumApril 12, 2019
soflyy wp all import ** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via... CVE-2018-16254 Disputed 6.1 MediumApril 12, 2019
soflyy wp all import Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.7 for WordPress... CVE-2018-0547 6.1 MediumMarch 9, 2018
soflyy wp all import Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.6 for WordPress... CVE-2018-0546 6.1 MediumMarch 9, 2018