Read the docs

Xylus Themes

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Xylus Themes records in CISA KEV

No Xylus Themes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Smart Import 5 records MEDIUM Wp Event Aggregator 3 records LOW Wp Bulk Delete 2 records LOW Import Social Events 1 record LOW Xt Event Widget For Social Events 1 record MEDIUM

Records

2 records in Wp Bulk Delete · all components

TI-2024-31670 CVE-2024-47352 · GHSA-3j6w-wcmf-ph6c

WordPress WP Bulk Delete plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Stored XSS.This issue affects WP Bulk Delete: from n/a through <= 1.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00287 Published 2024-10-06 No fix listed CWE-79
TI-2025-35997 CVE-2025-58192 · GHSA-78g5-fq4q-8f3p

WordPress WP Bulk Delete Plugin <= 1.3.6 - Broken Access Control Vulnerability

Priority LOW 24

Missing Authorization vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bulk Delete: from n/a through <= 1.3.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00179 Published 2025-08-27 No fix listed CWE-862
Open these records in search →