CVE-2022-36386: Soflyy Wp All Import

High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days.

Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin <= 3.6.7 at WordPress.

Affected products

• Soflyy Wp All Import: up to and including 3.6.7

Published 2022-09-21. Last modified 2026-06-17.