VYPR
← All vendors
Vendor

Xylusthemes

Products
5
CVEs
12
Across products
12
Status
Private

Products

5

Recent CVEs

12
  • CVE-2020-24147CriJul 7, 2021
    WordPress
    Wp Smart Import
    risk 0.59cvss 9.1epss 0.02

    Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via the file field.

  • CVE-2025-47453HigMay 23, 2025
    Xylusthemes
    Wp Smart Import
    risk 0.53cvss 8.1epss 0.01

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes WP Smart Import wp-smart-import allows PHP Local File Inclusion.This issue affects WP Smart Import: from n/a through <= 1.1.3.

  • CVE-2025-47531HigMay 7, 2025
    Xylusthemes
    Xt Event Widget For Social Events
    risk 0.49cvss 7.5epss 0.01

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes XT Event Widget for Social Events xt-facebook-events allows PHP Local File Inclusion.This issue affects XT Event Widget for Social Events: from…

  • CVE-2025-24700HigFeb 14, 2025
    Xylusthemes
    Wp Event Aggregator
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator wp-event-aggregator allows Reflected XSS.This issue affects WP Event Aggregator: from n/a through <= 1.8.2.

  • CVE-2024-47352HigOct 6, 2024
    Xylusthemes
    Wp Bulk Delete
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Stored XSS.This issue affects WP Bulk Delete: from n/a through <= 1.3.1.

  • CVE-2024-30201HigMar 27, 2024
    WordPress
    Wordpress Importer
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Reflected XSS.This issue affects WordPress Importer: from n/a through 1.0.4.

  • CVE-2025-48256MedMay 19, 2025
    Xylusthemes
    Import Social Events
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes Import Social Events import-facebook-events allows Stored XSS.This issue affects Import Social Events: from n/a through <= 1.8.5.

  • CVE-2024-38703MedJul 20, 2024
    Xylusthemes
    Wp Event Aggregator
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator allows Stored XSS.This issue affects WP Event Aggregator: from n/a through 1.7.9.

  • CVE-2022-40209MedDec 6, 2022
    WordPress
    Wp Smart Import
    risk 0.40cvss 6.1epss 0.00

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xylus Themes WP Smart Import plugin <= 1.0.2 on WordPress.

  • CVE-2024-32597MedApr 18, 2024
    WordPress
    Wordpress Importer
    risk 0.38cvss 5.9epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Stored XSS.This issue affects WordPress Importer: from n/a through 1.0.7.

  • CVE-2025-58192MedAug 27, 2025
    Xylusthemes
    Wp Bulk Delete
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bulk Delete: from n/a through <= 1.3.6.

  • CVE-2024-31371MedApr 12, 2024
    Xylusthemes
    Wp Event Aggregator
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Xylus Themes WP Event Aggregator.This issue affects WP Event Aggregator: from n/a through 1.7.6.