Soflyy

Records43All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

Soflyy records in CISA KEV

No Soflyy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp All Import 19 records HIGH Wp All Export 7 records HIGH Export Any Wordpress Data To Xml/csv 5 records HIGH Breakdance 2 records LOW Oxygen 2 records LOW

Records

2 records in Oxygen · all components

TI-2022-23186 CVE-2022-46841 · GHSA-7cvj-846f-78fv

WordPress Oxygen Builder Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Oxygen Builder plugin <= 4.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00252 Published 2023-10-03 Fixed in 4.4 CWE-352

TI-2023-06341 CVE-2023-6938 · GHSA-jr6g-cpw8-93hj

Oxygen Builder <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field

LOW 28

The Oxygen Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom field in all versions up to, and including, 4.8 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00312 Published 2024-01-11 No fix listed CWE-79

Open these records in search →

Critical	4
High	20
Medium	18
Low	1
No CVSS	0