CVE-2025-47453

CVE-2025-47453 affects the WordPress plugin WP Smart Import (Xylus Themes) up to version 1.1.3, with a local file inclusion (LFI) vulnerability caused by improper control of Include/Require filename handling. Evidence in the CVE record and multiple connected sources confirms the vulnerability is ...

CVE-2024-32597

Technical details about CVE-2024-32597 (affected product/version, root cause, exploitability, and patch status) are not provided in the connected documents. Monitor for official advisories and vendor patches for updates.

CVE-2024-30201

Technical details for CVE-2024-30201 are not publicly provided in the supplied documents. No specifics on affected versions, vectors, or fixes are available here; monitor for updates from vendors and advisories.

CVE-2022-40209

The CVE-2022-40209 entry describes an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Xylus Themes WP Smart Import (WordPress) affecting version

CVE-2020-24147

The CVE-2020-24147 entry describes a Server-Side Request Forgery (SSRF) in the WordPress WP Smart Import plugin, version 1.0.0, exploitable via the file field. The issue is documented as affecting WP Smart Import 1.0.0 and is mitigated by upgrading to a newer version (e.g., 1.0.1+), per multiple ...