PatchTheCVE: wp event aggregatorhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-24700: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Thhttps://patchthecve.com/cve/CVE-2025-24700.htmlhttps://patchthecve.com/cve/CVE-2025-24700.htmlWed, 17 Jun 2026 08:59:27 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator wp-event-aggregator allows Reflected XSS.This issue affects WP Event Aggregator: from n/a through <= 1.8.2.CVE-2024-38703: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xhttps://patchthecve.com/cve/CVE-2024-38703.htmlhttps://patchthecve.com/cve/CVE-2024-38703.htmlWed, 17 Jun 2026 07:40:53 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator allows Stored XSS.This issue affects WP Event Aggregator: from n/a through 1.7.9.CVE-2024-31371: Cross-Site Request Forgery (CSRF) vulnerability in Xylus Themes WP Event Aggregator.This issue affects WP Evenhttps://patchthecve.com/cve/CVE-2024-31371.htmlhttps://patchthecve.com/cve/CVE-2024-31371.htmlWed, 17 Jun 2026 07:28:18 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Xylus Themes WP Event Aggregator.This issue affects WP Event Aggregator: from n/a through 1.7.6.