Soflyy vulnerabilities
16 published CVEs name Soflyy among the affected products.
- 16Published CVEs16 of them scored
- 4Last 12 monthspublished in the last year
- 3Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-65551
WordPress Breakdance plugin < 2.7 - Broken Access Control vulnerability
Soflyy · Breakdance
High7.5 - CVE-2026-57735
WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability
Soflyy · Breakdance
High7.1 - CVE-2025-53237
WordPress WP Wizard Cloak Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
Soflyy · WP Wizard Cloak
High7.1 - CVE-2026-1582
WP All Export <= 1.4.14 - Unauthenticated Sensitive Information Exposure via PHP Type Juggling
soflyy · WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel
Low3.7 - CVE-2025-49038
WordPress WP Dynamic Links plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
Soflyy · WP Dynamic Links
High7.1 - CVE-2024-9661
WP All Import Pro <= 4.9.7 - Cross-Site Request Forgery to Imported Content Deletion
Soflyy · WP All Import Pro
Medium4.3 - CVE-2024-9664
WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) PHP Object Injection via Import File
Soflyy · WP All Import Pro
High7.2 - CVE-2024-8722
WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
Soflyy · WP All Import Pro
Medium5.5 - CVE-2024-9624
WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import
Soflyy · WP All Import Pro
High7.6 - CVE-2024-31939
WordPress Import any XML or CSV File to WordPress plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) vulnerability
Soflyy · Import any XML or CSV File to WordPress
Medium4.3