Log in Start free

Soflyy

Products

ProductCVEsExploitedLatest
WP All Import Pro4–Feb 7, 2025
Breakdance3–Aug 6, 2026
Oxygen Builder2–Apr 3, 2024
WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel1–Feb 18, 2026
WP Dynamic Links1–Aug 14, 2025
WP Wizard Cloak1–Feb 20, 2026
Import any XML or CSV File to WordPress1–Apr 10, 2024
Import any XML or CSV File to WordPress (WordPress plugin)1–Sep 21, 2022

Exploited and recent CVEs

  • CVE-2026-65551 High 7.5 WordPress Breakdance plugin < 2.7 - Broken Access Control vulnerability 0.4%
  • CVE-2026-57735 High 7.1 WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-53237 High 7.1 WordPress WP Wizard Cloak Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2026-1582 Low 3.7 WP All Export <= 1.4.14 - Unauthenticated Sensitive Information Exposure via PHP Type Juggling 0.3%
  • CVE-2025-49038 High 7.1 WordPress WP Dynamic Links plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-9661 Medium 4.3 WP All Import Pro <= 4.9.7 - Cross-Site Request Forgery to Imported Content Deletion 0.2%
  • CVE-2024-9664 High 7.2 WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) PHP Object Injection via Import File 0.7%
  • CVE-2024-8722 Medium 5.5 WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload 0.4%
  • CVE-2024-9624 High 7.6 WP All Import Pro <= 4.9.3 - Authenticated (Administrator+) Server-Side Request Forgery via File Import 0.4%
  • CVE-2024-31939 Medium 4.3 WordPress Import any XML or CSV File to WordPress plugin <= 3.7.3 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-31380 Critical 9.9 WordPress Oxygen plugin <= 4.9 - Authenticated Remote Code Execution (RCE) vulnerability 0.8%
  • CVE-2024-31390 Critical 9.9 WordPress Breakdance plugin <= 1.7.2 - Authenticated Remote Code Execution (RCE) vulnerability 0.9%
  • CVE-2022-46841 Medium 5.4 WordPress Oxygen Builder Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2022-36386 Critical 9.1 WordPress Import any XML or CSV File to WordPress plugin <= 3.6.7 - Authenticated Arbitrary Code Execution vulnerability 1.5%