Skip to content
Xylusthemes vulnerabilities
Newest
-
xylus themes wp bulk delete
WordPress WP Bulk Delete Plugin <= 1.3.6 - Broken Access Control Vulnerability
CVE-2025-58192
4.3 Medium
-
xylus themes wp smart import
WordPress WP Smart Import plugin <= 1.1.3 - Local File Inclusion Vulnerability
CVE-2025-47453
8.1 High
-
xylus themes import social events
WordPress Import Social Events plugin <= 1.8.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48256
6.5 Medium
-
xylus themes xt event widget for social events
WordPress XT Event Widget for Social Events plugin <= 1.1.7 - Local File Inclusion Vulnerability
CVE-2025-47531
7.5 High
-
xylus themes wp event aggregator
WordPress WP Event Aggregator Plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24700
7.1 High
-
xylus themes wp bulk delete
WordPress WP Bulk Delete plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-47352
7.1 High
-
xylus themes wp event aggregator
WordPress WP Event Aggregator plugin <= 1.7.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-38703
6.5 Medium
-
wordpressdotorg wordpress importer, xylusthemes wp smart import +1 more
WordPress WP Smart Import plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-32597
5.9 Medium
-
xylus themes wp event aggregator
WordPress WP Event Aggregator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31371
4.3 Medium
-
wordpressdotorg wordpress importer, xylusthemes wp smart import +1 more
WordPress WP Smart Import plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-30201
7.1 High
-
xylus themes wp smart import
WP Smart Import plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-40209
6.1 Medium
-
xylusthemes wp smart import
Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1...
CVE-2020-24147
9.1 Critical