Skip to content
OpenAdvisories
Critical · 9.1 CVE-2022-36386 EUVD-2022-39099GHSA-27v6-4m9p-3qq4

WordPress Import any XML or CSV File to WordPress plugin <= 3.6.7 - Authenticated Arbitrary Code Execution vulnerability

Published Sep 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Soflyy Product: Import any XML or CSV File to WordPress (WordPress plugin) Category: Web / CMS

Description

Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin <= 3.6.7 at WordPress.

Affected products

VendorProductAffectedFixed
Soflyy Import any XML or CSV File to WordPress (WordPress plugin) <= 3.6.7 – ≤ 3.6.7 —

References