CVE-2020-24147: Xylusthemes Wp Smart Import

Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days.

Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via the file field.

Affected products

• Xylusthemes Wp Smart Import: version 1.0.0 only

Published 2021-07-07. Last modified 2026-06-17.