xylus
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Import Eventbrite Events | 1 | – | Dec 14, 2024 |
| WP Bulk Delete | 1 | – | Jul 16, 2026 |
| WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar | 1 | – | Feb 18, 2026 |
| WP Smart Import : Import any XML File to WordPress | 1 | – | Jan 4, 2025 |
Exploited and recent CVEs
- CVE-2026-15727 WP Bulk Delete <= 1.4.2 - Authenticated (Administrator+) SQL Injection via 'delete_user_roles' Parameter 0.6%
- CVE-2026-1941 WP Event Aggregator <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%
- CVE-2024-12701 WP Smart Import : Import any XML File to WordPress <= 1.1.2 - Reflected Cross-Site Scripting 0.4%
- CVE-2024-12422 Import Eventbrite Events <= 1.7.4 - Reflected Cross-Site Scripting 0.4%