xylus vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20251
3. 20262

Newest CVEs

• CVE-2026-15727

  WP Bulk Delete <= 1.4.2 - Authenticated (Administrator+) SQL Injection via 'delete_user_roles' Parameter

  xylus · WP Bulk Delete

  Medium4.9
• CVE-2026-1941

  WP Event Aggregator <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

  xylus · WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar

  Medium6.4
• CVE-2024-12701

  WP Smart Import : Import any XML File to WordPress <= 1.1.2 - Reflected Cross-Site Scripting

  xylus · WP Smart Import : Import any XML File to WordPress

  Medium6.1
• CVE-2024-12422

  Import Eventbrite Events <= 1.7.4 - Reflected Cross-Site Scripting

  xylus · Import Eventbrite Events

  Medium6.1