dbcve.org
Vulnerability index

Browse CVEs

11 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Wp Bulk Delete MEDIUM 5.4
CVE-2025-58192

Missing Authorization vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Exploiting Incorrectly Configured Access Control Security Le…

Fix: 1.3.7+
Fix from $1,600 2025-08-27
Wp Smart Import CRITICAL 9.8
CVE-2025-47453

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes WP Smart Import…

Fix: 1.1.4+
Fix from $2,300 2025-05-23
Import Social Events MEDIUM 5.4
CVE-2025-48256

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes Import Social Events import-facebo…

Fix: after 1.8.5
Fix from $1,600 2025-05-19
Xt Event Widget For Social Events HIGH 8.8
CVE-2025-47531

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes XT Event Widget…

Fix: 1.1.8+
Fix from $1,950 2025-05-07
Wp Event Aggregator MEDIUM 6.1
CVE-2025-24700

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator wp-event-aggre…

Fix: 1.8.3+
Fix from $1,600 2025-02-14
Wp Bulk Delete HIGH 7.1
CVE-2024-47352

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allo…

Fix: 1.3.2+
Fix from $1,950 2024-10-06
Wp Event Aggregator MEDIUM 6.5
CVE-2024-38703

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator allows …

Fix: 1.8.0+
Fix from $1,600 2024-07-20
Wp Smart Import MEDIUM 5.4
CVE-2024-32597

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Stored X…

Fix: 1.1.0+
Fix from $1,600 2024-04-18
Wp Smart Import MEDIUM 6.1
CVE-2024-30201

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Reflecte…

Fix: 1.0.5+
Fix from $1,600 2024-03-27
Wp Smart Import MEDIUM 6.1
CVE-2022-40209

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xylus Themes WP Smart Import plugin <= 1.0.2 on WordPress.

Fix: after 1.0.2
Fix from $1,600 2022-12-06
Wp Smart Import CRITICAL 9.1
CVE-2020-24147

Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via the file field.

Mitigation only
Fix from $2,300 2021-07-07