Hogash
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| KALLYAS | 6 | – | Oct 23, 2026 |
| KALLYAS - Creative eCommerce Multi-Purpose WordPress Theme | 4 | – | Nov 1, 2025 |
Exploited and recent CVEs
- CVE-2026-112863 WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2025-63061 WordPress KALLYAS theme < 4.25.0 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-63060 WordPress KALLYAS theme < 4.25.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2025-62018 WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability 0.3%
- CVE-2025-62017 WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability 0.3%
- CVE-2025-62016 WordPress Kallyas theme <= 4.22.0 - Arbitrary File Upload vulnerability 0.4%
- CVE-2025-6988 Kallyas <= 4.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2025-6990 Kallyas <= 4.24.0 - Authenticated (Contributor+) Remote Code Execution 0.6%
- CVE-2025-6991 Kallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion 0.9%
- CVE-2025-6989 Kallyas <= 4.21.0 - Authenticated (Contributor+) Arbitrary Folder Deletion 0.5%