Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
soflyy vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-4724
The Export any WordPress data to XML/CSV WordPress plugin prior to 1.4.0, WP All Export Pro WordPress plugin prior to 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an malicious user to run arbitrary command on the remote server
Soflyy Export Any Wordpress Data To Xml\\/csv
Soflyy Wp All Export
NA
CVE-2023-5882
The Export any WordPress data to XML/CSV WordPress plugin prior to 1.4.0, WP All Export Pro WordPress plugin prior to 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing malicious users to make logged in users perform unwanted actions leading to remo...
Soflyy Wp All Export
Soflyy Export Any Wordpress Data To Xml\\/csv
NA
CVE-2023-5886
The Export any WordPress data to XML/CSV WordPress plugin prior to 1.4.0, WP All Export Pro WordPress plugin prior to 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers with the ability to upload files to make logged in users perform unwan...
Soflyy Wp All Export
Soflyy Export Any Wordpress Data To Xml\\/csv
NA
CVE-2022-46841
Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Oxygen Builder plugin <= 4.4 versions.
Soflyy Oxygen
NA
CVE-2023-6938
The Oxygen Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom field in all versions up to, and including, 4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...
Soflyy Oxygen
NA
CVE-2022-3418
The Import any XML or CSV File to WordPress plugin prior to 3.6.9 is not properly filtering which file extensions are allowed to be imported on the server, which could allow administrators in multi-site WordPress installations to upload arbitrary files
Soflyy Wp All Import
4.3
CVSSv2
CVE-2017-18567
The wp-all-import plugin prior to 3.4.6 for WordPress has XSS.
Soflyy Wp All Import
4.3
CVSSv2
CVE-2018-20978
The wp-all-import plugin prior to 3.4.7 for WordPress has XSS.
Soflyy Wp All Import
NA
CVE-2022-2711
The Import any XML or CSV File to WordPress plugin prior to 3.6.9 is not validating the paths of files contained in uploaded zip archives, allowing highly privileged users, such as admins, to write arbitrary files to any part of the file system accessible by the web server via a ...
Soflyy Wp All Import
NA
CVE-2022-3394
The WP All Export Pro WordPress plugin prior to 1.7.9 does not limit some functionality during exports only to users with the Administrator role, allowing any logged in user which has been given privileges to perform exports to execute arbitrary code on the site. By default only ...
Soflyy Wp All Export
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
firmware
CVE-2006-4304
CVE-2024-32878
CVE-2024-31502
XSS
CVE-2024-3059
CVE-2024-33692
CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »