Every CVE whose affected-product data names Soflyy Wp All Export, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (7)
CVE-2023-5882 — CVSS 8.8 (high): The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check…
CVE-2022-3395 — CVSS 8.8 (high): The WP All Export Pro WordPress plugin before 1.7.9 uses the contents of the cc_sql POST parameter directly as a database query, allowing…
CVE-2023-5886 — CVSS 8.8 (high): The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check…
CVE-2024-7419 — CVSS 8.3 (high): The WP ALL Export Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.1 via the…
CVE-2022-3394 — CVSS 7.2 (high): The WP All Export Pro WordPress plugin before 1.7.9 does not limit some functionality during exports only to users with the Administrator…
CVE-2023-4724 — CVSS 7.2 (high): The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate…
CVE-2024-7425 — CVSS 6.8 (medium): The WP ALL Export Pro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to…