cleantalk
Vulnerabilities and Security Researches

WP Smart Import : Import any XML File to WordPress, CVE-2025-47453

CVE, Research URL

CVE-2025-47453

Published on
May 23, 2025
Research Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes WP Smart Import allows PHP Local File Inclusion. This issue affects WP Smart Import: from n/a through 1.1.3.
Affected versions
Min -, max 1.1.4.
Status
vulnerable