Browse CVEs

MEDIUM 5.4 CVE-2025-58192 Missing Authorization vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Exploiting Incorrectly Configured Access Control Security Le… Wp Bulk Delete 1.3.7+ Fix from $1,6002025-08-27 CRITICAL 9.8 CVE-2025-47453 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes WP Smart Import… Wp Smart Import 1.1.4+ Fix from $2,3002025-05-23 MEDIUM 5.4 CVE-2025-48256 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes Import Social Events import-facebo… Import Social Events after 1.8.5 Fix from $1,6002025-05-19 HIGH 8.8 CVE-2025-47531 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes XT Event Widget… Xt Event Widget For Social Events 1.1.8+ Fix from $1,9502025-05-07 MEDIUM 6.1 CVE-2025-24700 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator wp-event-aggre… Wp Event Aggregator 1.8.3+ Fix from $1,6002025-02-14 HIGH 7.1 CVE-2024-47352 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allo… Wp Bulk Delete 1.3.2+ Fix from $1,9502024-10-06 MEDIUM 6.5 CVE-2024-38703 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator allows … Wp Event Aggregator 1.8.0+ Fix from $1,6002024-07-20 MEDIUM 5.4 CVE-2024-32597 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Stored X… Wp Smart Import 1.1.0+ Fix from $1,6002024-04-18 MEDIUM 6.1 CVE-2024-30201 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Reflecte… Wp Smart Import 1.0.5+ Fix from $1,6002024-03-27 MEDIUM 6.1 CVE-2022-40209 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xylus Themes WP Smart Import plugin <= 1.0.2 on WordPress. Wp Smart Import after 1.0.2 Fix from $1,6002022-12-06 CRITICAL 9.1 CVE-2020-24147 Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via the file field. Wp Smart Import Mitigation only Fix from $2,3002021-07-07