Read the docs

Xylus Themes

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Xylus Themes records in CISA KEV

No Xylus Themes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Smart Import 5 records MEDIUM Wp Event Aggregator 3 records LOW Wp Bulk Delete 2 records LOW Import Social Events 1 record LOW Xt Event Widget For Social Events 1 record MEDIUM

Records

5 records in Wp Smart Import · all components

TI-2025-29950 CVE-2025-47453 · GHSA-qw6m-wwcp-hjpw

WordPress WP Smart Import plugin <= 1.1.3 - Local File Inclusion Vulnerability

Priority MEDIUM 44

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes WP Smart Import wp-smart-import allows PHP Local File Inclusion.This issue affects WP…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2025-05-23 No fix listed CWE-98
TI-2024-21484 CVE-2024-32597 · GHSA-v4hx-5qgp-299x

WordPress WP Smart Import plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Stored XSS.This issue affects WordPress Importer: from n/a through 1.0.7.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00314 Published 2024-04-18 No fix listed CWE-79
Open these records in search →