KlbTheme
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Total Donations | 3 | – | Oct 9, 2026 |
| Bacola theme (core plugin) | 1 | – | Mar 26, 2024 |
| Clotya theme | 1 | – | Mar 26, 2024 |
| Clotya theme (core plugin) | 1 | – | Mar 26, 2024 |
| Cosmetsy theme | 1 | – | Mar 26, 2024 |
| Cosmetsy theme (core plugin) | 1 | – | Mar 26, 2024 |
| Furnob theme | 1 | – | Mar 26, 2024 |
| Bacola theme | 1 | – | Mar 26, 2024 |
| Machic Core | 1 | – | Jan 5, 2026 |
| Machic theme | 1 | – | Mar 26, 2024 |
| Medibazar theme | 1 | – | Mar 26, 2024 |
| Medibazar theme (core plugin) | 1 | – | Mar 26, 2024 |
| Partdo theme | 1 | – | Mar 26, 2024 |
| Partdo theme (core plugin) | 1 | – | Mar 26, 2024 |
| Furnob theme (core plugin) | 1 | – | Mar 26, 2024 |
Exploited and recent CVEs
- CVE-2026-94159 WordPress Total Donations plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-73391 WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability 0.4%
- CVE-2026-73390 WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability 0.5%
- CVE-2023-49186 WordPress Machic Core plugin <= 1.2.6 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2023-49838 Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbTheme 0.3%
- CVE-2023-49838 Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbTheme 0.3%
- CVE-2023-49838 Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbTheme 0.3%
- CVE-2023-49838 Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbTheme 0.3%
- CVE-2023-49838 Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbTheme 0.3%
- CVE-2023-49838 Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbTheme 0.3%
- CVE-2023-49838 Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbTheme 0.3%
- CVE-2023-49839 Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbTheme 0.5%
- CVE-2023-49839 Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbTheme 0.5%
- CVE-2023-49839 Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbTheme 0.5%
- CVE-2023-49839 Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbTheme 0.5%
- CVE-2023-49839 Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbTheme 0.5%
- CVE-2023-49839 Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbTheme 0.5%