Skip to content
OpenAdvisories

Vendor

Soflyy

16 known vulnerabilities.

Products

WP All Import Pro 4 Breakdance 3 Oxygen Builder 2 WP All Import 2 Import any XML or CSV File to WordPress (WordPress plugin) 1 Import any XML or CSV File to WordPress 1 WP Wizard Cloak 1 WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel 1 WP Dynamic Links 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-31380

    WordPress Oxygen plugin <= 4.9 - Authenticated Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Soflyy Oxygen Builder allows Code Injection. Vendor is ignoring report, refuses to patch the issue.This issue affects Oxygen Builder: from n/a through 4.9.

    Soflyy Oxygen Builder
  • Critical 9.9
    CVE-2024-31390

    WordPress Breakdance plugin <= 1.7.2 - Authenticated Remote Code Execution (RCE) vulnerability

    : Improper Control of Generation of Code ('Code Injection') vulnerability in Soflyy Breakdance allows : Code Injection.This issue affects Breakdance: from n/a through 1.7.2.

    Soflyy Breakdance
  • Critical 9.1
    CVE-2022-36386

    WordPress Import any XML or CSV File to WordPress plugin <= 3.6.7 - Authenticated Arbitrary Code Execution vulnerability

    Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin <= 3.6.7 at WordPress.

    Soflyy Import any XML or CSV File to WordPress (WordPress plugin) Web / CMS