Xylusthemes

12 CVEs across 5 Xylusthemes products. Browse Xylusthemes vulnerabilities, severities, and proof-of-concept exploits.

Xylusthemes products with known CVEs

ProductCVEs
Wp Smart Import5
Wp Event Aggregator3
Wp Bulk Delete2
Import Social Events1
Xt Event Widget For Social Events1
Xylusthemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-58192Medium4.32025-08-27Missing Authorization vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Exploiting Incorrectly Configured Access Control Security Levels.This…
CVE-2025-47453High8.12025-05-23Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes WP Smart Import wp-smart-…
CVE-2025-48256Medium6.52025-05-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes Import Social Events import-facebook-events…
CVE-2025-47531High7.52025-05-07Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes XT Event Widget for Socia…
CVE-2025-24700High7.12025-02-14Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator wp-event-aggregator allo…
CVE-2024-47352High7.12024-10-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Stored…
CVE-2024-38703Medium6.52024-07-20Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator allows Stored XSS…
CVE-2024-32597Medium5.92024-04-18Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Stored XSS.This is…
CVE-2024-31371Medium4.32024-04-12Cross-Site Request Forgery (CSRF) vulnerability in Xylus Themes WP Event Aggregator.This issue affects WP Event Aggregator: from n/a through 1.7.6.
CVE-2024-30201High7.12024-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Reflected XSS.This…
CVE-2022-40209Medium6.12022-12-06Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xylus Themes WP Smart Import plugin <= 1.0.2 on WordPress.
CVE-2020-24147Critical9.12021-07-07Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via the file field.