CVE-2024-31939

CVE-2024-31939 : CSRF vulnerability in the WordPress plugin “Import any XML or CSV File to WordPress” (Soflyy WP All Import) affecting versions up to 3.7.3. Public data indicates a CSRF flaw that can be triggered with user interaction and has network access implications, with no explicit remediat...

CVE-2022-36386

Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin = 3.6.7 at WordPress...

Remote code execution

Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin = 3.6.7 at WordPress...

PT-2022-23345 · WordPress · Soflyy Import Any Xml/Csv File To Wordpress

Name of the Vulnerable Software and Affected Versions: Soflyy Import any XML or CSV File to WordPress plugin versions = 3.6.7 Description: The issue is related to an Authenticated Arbitrary Code Execution vulnerability. This allows for the execution of arbitrary code by an authenticated user...