Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xylus Themes WP Smart Import plugin <= 1.0.2 on WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Xylus Themes | WP Smart Import | ≤ 1.0.2 | — |
Medium · 6.1
CVE-2022-40209
EUVD-2022-43508GHSA-p5w8-5f33-gggw
WP Smart Import plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
Published Dec 6, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack