Skip to content
OpenAdvisories

Vendor

Xylus Themes

11 known vulnerabilities.

Products

WP Event Aggregator 3 WP Smart Import 2 WordPress Importer 2 WP Bulk Delete 2 XT Event Widget for Social Events 1 Import Social Events 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-58192

    WordPress WP Bulk Delete Plugin <= 1.3.6 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bulk Delete: from n/a through <= 1.3.6.

    Xylus Themes WP Bulk Delete
  • Medium 6.5
    CVE-2025-48256

    WordPress Import Social Events plugin <= 1.8.5 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes Import Social Events import-facebook-events allows Stored XSS.This issue affects Import Social Events: from n/a through <= 1.8.5.

    Xylus Themes Import Social Events
  • Medium 6.5
    CVE-2024-38703

    WordPress WP Event Aggregator plugin <= 1.7.9 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator allows Stored XSS.This issue affects WP Event Aggregator: from n/a through 1.7.9.

    Xylus Themes WP Event Aggregator
  • Medium 5.9
    CVE-2024-32597

    WordPress WP Smart Import plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Stored XSS.This issue affects WordPress Importer: from n/a through 1.0.7.

    Xylus Themes WordPress Importer Web / CMS
  • Medium 4.3
    CVE-2024-31371

    WordPress WP Event Aggregator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Xylus Themes WP Event Aggregator.This issue affects WP Event Aggregator: from n/a through 1.7.6.

    Xylus Themes WP Event Aggregator
  • Medium 6.1
    CVE-2022-40209

    WP Smart Import plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xylus Themes WP Smart Import plugin <= 1.0.2 on WordPress.

    Xylus Themes WP Smart Import