Kleor Contact Manager

• CVE-2026-109218 Critical 9.8 Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass 0.6%
• CVE-2026-32517 High 7.1 WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-68853 High 8.8 WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability 0.4%
• CVE-2025-8783 Medium 4.4 Contact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title' 0.3%
• CVE-2025-1028 High 8.1 Contact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload 0.8%