Soflyy vulnerabilities

CVEs per yearBy the year they were published

1. 20182
2. 20221
3. 20231
4. 20244
5. 20254
6. 20264

Newest CVEs

• CVE-2026-65551

  WordPress Breakdance plugin < 2.7 - Broken Access Control vulnerability

  Soflyy · Breakdance

  High7.5
• CVE-2026-57735

  WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability

  Soflyy · Breakdance

  High7.1
• CVE-2025-53237

  WordPress WP Wizard Cloak Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability

  Soflyy · WP Wizard Cloak

  High7.1
• CVE-2026-1582

  WP All Export <= 1.4.14 - Unauthenticated Sensitive Information Exposure via PHP Type Juggling

  soflyy · WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel

  Low3.7
• CVE-2025-49038

  WordPress WP Dynamic Links plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

  Soflyy · WP Dynamic Links

  High7.1
• CVE-2024-9661

  WP All Import Pro <= 4.9.7 - Cross-Site Request Forgery to Imported Content Deletion

  Soflyy · WP All Import Pro

  Medium4.3
• CVE-2024-9664

  WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) PHP Object Injection via Import File

  Soflyy · WP All Import Pro

  High7.2
• CVE-2024-8722

  WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload

  Soflyy · WP All Import Pro

  Medium5.5
• CVE-2024-9624

  WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import

  Soflyy · WP All Import Pro

  High7.6
• CVE-2024-31939

  WordPress Import any XML or CSV File to WordPress plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) vulnerability

  Soflyy · Import any XML or CSV File to WordPress

  Medium4.3