xylus vulnerabilities
4 published CVEs name xylus among the affected products.
- 4Published CVEs4 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-15727
WP Bulk Delete <= 1.4.2 - Authenticated (Administrator+) SQL Injection via 'delete_user_roles' Parameter
xylus · WP Bulk Delete
Medium4.9 - CVE-2026-1941
WP Event Aggregator <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
xylus · WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar
Medium6.4 - CVE-2024-12701
WP Smart Import : Import any XML File to WordPress <= 1.1.2 - Reflected Cross-Site Scripting
xylus · WP Smart Import : Import any XML File to WordPress
Medium6.1 - CVE-2024-12422
Import Eventbrite Events <= 1.7.4 - Reflected Cross-Site Scripting
xylus · Import Eventbrite Events
Medium6.1