Xt Event Widget For Social Events

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-47531 May 07, 15:16 HIGH This Week

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes XT Event Widget for Social Events allows PHP Local File. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

PHP WordPress Information Disclosure LFI Xt Event Widget For Social Events +2

NVD

CVSS 3.1

7.5

EPSS

0.4%

CVE-2025-47531

EPSS 0% CVSS 7.5

HIGH This Week

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes XT Event Widget for Social Events allows PHP Local File. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

PHP WordPress Information Disclosure +4

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy