Skip to contentXylus Themes vulnerabilities
Newest
- xylus wp bulk deleteWP Bulk Delete <= 1.4.2 - Authenticated (Administrator+) SQL Injection via 'delete_user_roles' ParameterCVE-2026-157274.9 Medium
- xylus themes wp bulk deleteWordPress WP Bulk Delete Plugin <= 1.3.6 - Broken Access Control VulnerabilityCVE-2025-581924.3 Medium
- xylus themes wp smart importWordPress WP Smart Import plugin <= 1.1.3 - Local File Inclusion VulnerabilityCVE-2025-474538.1 High
- xylus themes import social eventsWordPress Import Social Events plugin <= 1.8.5 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-482566.5 Medium
- xylus themes xt event widget for social eventsWordPress XT Event Widget for Social Events plugin <= 1.1.7 - Local File Inclusion VulnerabilityCVE-2025-475317.5 High
- xylus themes wp event aggregatorWordPress WP Event Aggregator Plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-247007.1 High
- xylus themes wp bulk deleteWordPress WP Bulk Delete plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-473527.1 High
- xylus themes wp event aggregatorWordPress WP Event Aggregator plugin <= 1.7.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-387036.5 Medium
- wordpressdotorg wordpress importer, xylusthemes wp smart import +1 moreWordPress WP Smart Import plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-325975.9 Medium
- xylus themes wp event aggregatorWordPress WP Event Aggregator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-313714.3 Medium
- wordpressdotorg wordpress importer, xylusthemes wp smart import +1 moreWordPress WP Smart Import plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-302017.1 High
- xylus themes wp smart importWP Smart Import plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)CVE-2022-402096.1 Medium