Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Xylus Themes Component: Xt Event Widget For Social Events Clear all filters
TI-2025-30028 CVE-2025-47531 · GHSA-jxrv-m7f3-wm3w

WordPress XT Event Widget for Social Events plugin <= 1.1.7 - Local File Inclusion Vulnerability

Priority MEDIUM 41

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes XT Event Widget for Social Events xt-facebook-events allows PHP Local File Inclusion.T…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00701 Published 2025-05-07 No fix listed CWE-98