Hogash

Products

ProductCVEsExploitedLatest
KALLYAS6–Oct 23, 2026
KALLYAS - Creative eCommerce Multi-Purpose WordPress Theme4–Nov 1, 2025

Exploited and recent CVEs

  • CVE-2026-112863 High 7.1 WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2025-63061 Medium 6.5 WordPress KALLYAS theme < 4.25.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-63060 Medium 4.3 WordPress KALLYAS theme < 4.25.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-62018 Medium 5.3 WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-62017 Medium 5.4 WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-62016 Critical 9.9 WordPress Kallyas theme <= 4.22.0 - Arbitrary File Upload vulnerability 0.4%
  • CVE-2025-6988 Medium 6.4 Kallyas <= 4.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-6990 High 8.8 Kallyas <= 4.24.0 - Authenticated (Contributor+) Remote Code Execution 0.6%
  • CVE-2025-6991 High 7.5 Kallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion 0.9%
  • CVE-2025-6989 High 8.1 Kallyas <= 4.21.0 - Authenticated (Contributor+) Arbitrary Folder Deletion 0.5%