Xylus

4 CVEs across 4 Xylus products. Browse Xylus vulnerabilities, severities, and proof-of-concept exploits.

Xylus products with known CVEs

ProductCVEs
Import Eventbrite Events1
Wp Bulk Delete1
Wp Event Aggregator: Import Eventbrite Events, Meetup Events, Social Events And Any Ical Events Into Event Calendar1
Wp Smart Import : Import Any XML File To WordPress1
Xylus CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-15727Medium4.92026-07-16The WP Bulk Delete plugin for WordPress is vulnerable to generic SQL Injection via the 'delete_user_roles' parameter in all versions up to, and including, 1.4…
CVE-2026-1941Medium6.42026-02-18The WP Event Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_events' shortcode in all versions up to, and inc…
CVE-2024-12701Medium6.12025-01-04The WP Smart Import : Import any XML File to WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘ page’ parameter in all ve…
CVE-2024-12422Medium6.12024-12-14The Import Eventbrite Events plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including…