Xylus vulnerabilities
Newest
- xylus wp bulk delete WP Bulk Delete <= 1.4.2 - Authenticated (Administrator+) SQL Injection via 'delete_user_roles' Parameter 4.9 Medium
- xylus wp event aggregator: import eventbrite events, meetup events, social events and any ical events into event calendar WP Event Aggregator <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 6.4 Medium
- xylus wp smart import : import any xml file to wordpress WP Smart Import : Import any XML File to WordPress <= 1.1.2 - Reflected Cross-Site Scripting 6.1 Medium
- xylus import eventbrite events Import Eventbrite Events <= 1.7.4 - Reflected Cross-Site Scripting 6.1 Medium