Xylus Themes

Products

Product	CVEs	Exploited	Latest
WP Event Aggregator	3	–	Feb 14, 2025
WordPress Importer	2	–	Apr 18, 2024
WP Bulk Delete	2	–	Aug 27, 2025
WP Smart Import	2	–	May 23, 2025
Import Social Events	1	–	May 19, 2025
XT Event Widget for Social Events	1	–	May 7, 2025

CVE-2025-58192 Medium 4.3 WordPress WP Bulk Delete Plugin <= 1.3.6 - Broken Access Control Vulnerability 0.2%
CVE-2025-47453 High 8.1 WordPress WP Smart Import plugin <= 1.1.3 - Local File Inclusion Vulnerability 0.7%
CVE-2025-48256 Medium 6.5 WordPress Import Social Events plugin <= 1.8.5 - Cross Site Scripting (XSS) Vulnerability 0.3%
CVE-2025-47531 High 7.5 WordPress XT Event Widget for Social Events plugin <= 1.1.7 - Local File Inclusion Vulnerability 0.7%
CVE-2025-24700 High 7.1 WordPress WP Event Aggregator Plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-47352 High 7.1 WordPress WP Bulk Delete plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-38703 Medium 6.5 WordPress WP Event Aggregator plugin <= 1.7.9 - Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-32597 Medium 5.9 WordPress WP Smart Import plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-31371 Medium 4.3 WordPress WP Event Aggregator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
CVE-2024-30201 High 7.1 WordPress WP Smart Import plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2022-40209 Medium 6.1 WP Smart Import plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS) 0.4%