Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
kallyas
WordPress
· Theme
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
KALLYAS - Creative eCommerce Multi-Purpose WordPress Theme <= 4.25.0 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-112863
kallyas
WordPress
High
No fix reported
2026-10-24
Kallyas <= 4.24.0 - Authenticated (Contributor+) Remote Code Execution
CVE-2025-6990
kallyas
WordPress
High
No fix reported
2026-06-17
Kallyas <= 4.22.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-63061
kallyas
WordPress
Medium
No fix reported
2025-12-10
Kallyas <= 4.2 - Cross-Site Request Forgery
CVE-2025-63060
kallyas
WordPress
Medium
No fix reported
2025-12-10
Kallyas <= 4.22.0 - Authenticated (Contributor+) Arbitrary File Upload
CVE-2025-62016
kallyas
WordPress
High
Fix reported
2025-11-12
Kallyas <= 4.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-6988
kallyas
WordPress
Medium
Fix reported
2025-11-01
Kallyas <= 4.22.0 - Missing Authorization
CVE-2025-62017
kallyas
WordPress
Medium
Fix reported
2025-10-23
Kallyas <= 4.22.0 - Missing Authorization
CVE-2025-62018
kallyas
WordPress
Medium
Fix reported
2025-10-23
Kallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-6991
kallyas
WordPress
High
Fix reported
2025-07-26
Kallyas <= 4.21.0 - Authenticated (Contributor+) Arbitrary Folder Deletion
CVE-2025-6989
kallyas
WordPress
High
Fix reported
2025-07-26