Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
soflyy vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-5882
The Export any WordPress data to XML/CSV WordPress plugin prior to 1.4.0, WP All Export Pro WordPress plugin prior to 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing malicious users to make logged in users perform unwanted actions leading to remo...
Soflyy Wp All Export
Soflyy Export Any Wordpress Data To Xml\\/csv
NA
CVE-2023-5886
The Export any WordPress data to XML/CSV WordPress plugin prior to 1.4.0, WP All Export Pro WordPress plugin prior to 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers with the ability to upload files to make logged in users perform unwan...
Soflyy Wp All Export
Soflyy Export Any Wordpress Data To Xml\\/csv
NA
CVE-2023-4724
The Export any WordPress data to XML/CSV WordPress plugin prior to 1.4.0, WP All Export Pro WordPress plugin prior to 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an malicious user to run arbitrary command on the remote server
Soflyy Export Any Wordpress Data To Xml\\/csv
Soflyy Wp All Export
NA
CVE-2022-46841
Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Oxygen Builder plugin <= 4.4 versions.
Soflyy Oxygen
NA
CVE-2023-6938
The Oxygen Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom field in all versions up to, and including, 4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...
Soflyy Oxygen
4.3
CVSSv2
CVE-2015-9329
The wp-all-import plugin prior to 3.2.5 for WordPress has reflected XSS.
Soflyy Wp All Import
NA
CVE-2022-3395
The WP All Export Pro WordPress plugin prior to 1.7.9 uses the contents of the cc_sql POST parameter directly as a database query, allowing users which has been given permission to run exports to execute arbitrary SQL statements, leading to a SQL Injection vulnerability. By defau...
Soflyy Wp All Export
3.5
CVSSv2
CVE-2021-24714
The Import any XML or CSV File to WordPress plugin prior to 3.6.3 does not escape the Import's Title and Unique Identifier fields before outputting them in admin pages, which could allow high privilege users to perform Cross-Site attacks even when the unfiltered_html capabil...
Soflyy Wp All Import
NA
CVE-2022-2711
The Import any XML or CSV File to WordPress plugin prior to 3.6.9 is not validating the paths of files contained in uploaded zip archives, allowing highly privileged users, such as admins, to write arbitrary files to any part of the file system accessible by the web server via a ...
Soflyy Wp All Import
4.3
CVSSv2
CVE-2018-20978
The wp-all-import plugin prior to 3.4.7 for WordPress has XSS.
Soflyy Wp All Import
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22460
CVE-2024-4646
CVE-2024-29212
IMAP
CVE-2023-36672
CVE-2024-34547
command injection
CVE-2024-4651
stored XSS
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »