Xylus Themes

11 CVEs across 6 Xylus Themes products. Browse Xylus Themes vulnerabilities, severities, and proof-of-concept exploits.

Xylus Themes products with known CVEs

ProductCVEs
Wp Event Aggregator3
WordPress Importer2
Wp Bulk Delete2
Wp Smart Import2
Import Social Events1
Xt Event Widget For Social Events1
Xylus Themes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-58192Medium4.32025-08-27Missing Authorization vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Exploiting Incorrectly Configured Access Control Security Levels.This…
CVE-2025-47453High8.12025-05-23Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes WP Smart Import wp-smart-…
CVE-2025-48256Medium6.52025-05-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes Import Social Events import-facebook-events…
CVE-2025-47531High7.52025-05-07Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes XT Event Widget for Socia…
CVE-2025-24700High7.12025-02-14Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator wp-event-aggregator allo…
CVE-2024-47352High7.12024-10-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Stored…
CVE-2024-38703Medium6.52024-07-20Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator allows Stored XSS…
CVE-2024-32597Medium5.92024-04-18Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Stored XSS.This is…
CVE-2024-31371Medium4.32024-04-12Cross-Site Request Forgery (CSRF) vulnerability in Xylus Themes WP Event Aggregator.This issue affects WP Event Aggregator: from n/a through 1.7.6.
CVE-2024-30201High7.12024-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Reflected XSS.This…
CVE-2022-40209Medium6.12022-12-06Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xylus Themes WP Smart Import plugin <= 1.0.2 on WordPress.