Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes XT Event Widget for Social Events xt-facebook-events allows PHP Local File Inclusion.This issue affects XT Event Widget for Social Events: from n/a through <= 1.1.7.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Xt Facebook Events Plugin | — | Update xt-facebook-events plugin to version 1.1.8, or a newer patched version | May 15, 2025 | May 7, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub