Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Xylus Themes Component: Wp Smart Import Clear all filters
TI-2025-29950 CVE-2025-47453 · GHSA-qw6m-wwcp-hjpw

WordPress WP Smart Import plugin <= 1.1.3 - Local File Inclusion Vulnerability

Priority MEDIUM 44

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes WP Smart Import wp-smart-import allows PHP Local File Inclusion.This issue affects WP…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00737 Published 2025-05-23 No fix listed CWE-98
TI-2024-21484 CVE-2024-32597 · GHSA-v4hx-5qgp-299x

WordPress WP Smart Import plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows Stored XSS.This issue affects WordPress Importer: from n/a through 1.0.7.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00314 Published 2024-04-18 No fix listed CWE-79