CVE-2022-36386

Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin <= 3.6.7 at WordPress.

Score

CVSS 3.1 9.1 Critical

Status

Modified - audit@patchstack.com

Published

2022-09-21

Last modified

2026-04-28

Weaknesses

CWE-434, CWE-94

Affected products

• Import Any Xml Or Csv File To Wordpress Wordpress Plugin (Soflyy)
• Wp All Import (Soflyy)

References

• https://patchstack.com/database/vulnerability/wp-all-import/wordpress-import-any-xml-or-csv-file-to-wordpress-plugin-3-…
• https://wordpress.org/plugins/wp-all-import/#developers