How many Xylus Themes WP Event Aggregator CVEs are in CISA KEV?

None of Xylus Themes WP Event Aggregator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Xylus Themes WP Event Aggregator are affected?

15 distinct Xylus Themes WP Event Aggregator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Xylus Themes WP Event Aggregator CVEs?

Xylus Themes WP Event Aggregator's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)).

What is the average severity of Xylus Themes WP Event Aggregator CVEs?

The average CVSS base score across Xylus Themes WP Event Aggregator's scored CVEs is 6.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Xylus Themes

3 CVEs

Xylus Themes WP Event Aggregator Vulnerabilities

Name: Xylus Themes WP Event Aggregator vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WP Event Aggregator by Xylus Themes.

3

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.0

Avg CVSS

2024–2025

Last updated February 14, 2025

Overview

Xylus Themes WP Event Aggregator has 3 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Xylus Themes WP Event Aggregator, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Xylus Themes WP Event Aggregator's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Xylus Themes WP Event Aggregator's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Xylus Themes WP Event Aggregator CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Xylus Themes WP Event Aggregator version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.7.71 CVE
< 1.8.01 CVE
< 1.8.31 CVE
<= 1.7.61 CVE
<= 1.7.91 CVE
<= 1.8.21 CVE
>= 1.7.71 CVE
>= 1.8.01 CVE
>= 1.8.31 CVE

Fixed in

> 1.7.61 CVE
> 1.7.91 CVE
> 1.8.21 CVE
1.7.71 CVE
1.8.01 CVE
1.8.31 CVE

Find a version

3 CVEs

Sort

WordPress WP Event Aggregator Plugin <= 1.8.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24700
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (16th pct)2025-02-14
WordPress WP Event Aggregator plugin <= 1.7.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-38703
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.3% (19th pct)2024-07-20
WordPress WP Event Aggregator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31371
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.2% (10th pct)2024-04-12

Common weakness types

The CWE weakness categories most often found in Xylus Themes WP Event Aggregator CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Xylus Themes WP Event Aggregator CVEs were published each year.

2024

2

2025

1

Other Xylus Themes products

Browse vulnerabilities for other products by Xylus Themes.

wp smart import5 CVEs WordPress Importer2 CVEs WP Bulk Delete2 CVEs Import Social Events1 CVEs XT Event Widget for Social Events1 CVEs

All Xylus Themes vulnerabilities

Frequently asked questions

Common questions about Xylus Themes WP Event Aggregator vulnerabilities.

How many CVEs does Xylus Themes WP Event Aggregator have?: Xylus Themes WP Event Aggregator has 3 published CVE records since 2024.
How many Xylus Themes WP Event Aggregator CVEs are in CISA KEV?: None of Xylus Themes WP Event Aggregator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Xylus Themes WP Event Aggregator vulnerabilities?: No Xylus Themes WP Event Aggregator CVEs currently have a tracked public exploit in this dataset.
Which versions of Xylus Themes WP Event Aggregator are affected?: 15 distinct Xylus Themes WP Event Aggregator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Xylus Themes WP Event Aggregator CVEs?: Xylus Themes WP Event Aggregator's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)).
What is the average severity of Xylus Themes WP Event Aggregator CVEs?: The average CVSS base score across Xylus Themes WP Event Aggregator's scored CVEs is 6.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Xylus Themes WP Event Aggregator vulnerabilities

Monitor new Xylus Themes WP Event Aggregator vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing