CVE-2015-9330: Soflyy Wp All Import

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection.

Affected products

• Soflyy Wp All Import: before 3.2.5 (fixed in 3.2.5)

Published 2019-08-20. Last modified 2026-06-17.