Read the docs

Soflyy

Records43All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high20CVSS 7.0–8.9

Exploited now

Soflyy records in CISA KEV

No Soflyy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp All Import 19 records HIGH Wp All Export 7 records HIGH Export Any Wordpress Data To Xml/csv 5 records HIGH Breakdance 2 records LOW Oxygen 2 records LOW

Records

2 records in Breakdance · all components

TI-2024-04949 CVE-2024-5330 · GHSA-2848-mrx7-c934

Breakdance <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 30

The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the breakdance_css_file_paths_cache parameter in all versions up to, and including, 1.7.2 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-08-01 No fix listed CWE-79
TI-2024-04950 CVE-2024-5331 · GHSA-c69h-4c8j-wh43

Breakdance <= 1.7.2 - Missing Authorization

Priority LOW 20

The Breakdance plugin for WordPress is vulnerable to unauthorized access of data in all versions up to, and including, 1.7.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00235 Published 2024-08-01 No fix listed CWE-284
Open these records in search →