Vulnerabilities > Soflyy > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-11 | CVE-2023-6938 | Cross-site Scripting vulnerability in Soflyy Oxygen The Oxygen Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom field in all versions up to, and including, 4.8 due to insufficient input sanitization and output escaping. | 5.4 |
| 2019-08-20 | CVE-2018-20978 | Cross-site Scripting vulnerability in Soflyy WP ALL Import The wp-all-import plugin before 3.4.7 for WordPress has XSS. | 4.3 |
| 2019-08-20 | CVE-2017-18567 | Cross-site Scripting vulnerability in Soflyy WP ALL Import The wp-all-import plugin before 3.4.6 for WordPress has XSS. | 4.3 |
| 2019-08-20 | CVE-2015-9331 | 7PK - Security Features vulnerability in Soflyy WP ALL Import The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit. | 5.0 |
| 2019-08-20 | CVE-2015-9329 | Cross-site Scripting vulnerability in Soflyy WP ALL Import The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS. | 4.3 |
| 2019-04-12 | CVE-2018-16259 | Cross-site Scripting vulnerability in Soflyy WP ALL Import 3.4.9 There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-settings large_feed_limit. | 6.1 |
| 2019-04-12 | CVE-2018-16258 | Cross-site Scripting vulnerability in Soflyy WP ALL Import 3.4.9 There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via pmxi-admin-import custom_type. | 6.1 |
| 2019-04-12 | CVE-2018-16257 | Cross-site Scripting vulnerability in Soflyy WP ALL Import 3.4.9 There are multiple XSS vulnerabilities in WP All Import plugin 3.4.9 for WordPress via action=template. | 6.1 |
| 2019-04-12 | CVE-2018-16256 | Cross-site Scripting vulnerability in Soflyy WP ALL Import 3.4.9 There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via Add Filtering Options(Add Rule). | 6.1 |
| 2019-04-12 | CVE-2018-16255 | Cross-site Scripting vulnerability in Soflyy WP ALL Import 3.4.9 There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate. | 6.1 |