The4

Products

ProductCVEsExploitedLatest
Kalles Addons2–Aug 31, 2026
Kalles1–Oct 10, 2026
Molla1–Dec 18, 2025

Exploited and recent CVEs

  • CVE-2026-62076 Critical 9.8 WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-81778 Medium 6.5 WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-73389 Critical 9.8 WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability 0.6%
  • CVE-2025-60070 Medium 6.5 WordPress Molla - Multipurpose Responsive Shopify theme <= 1.5.13 - Arbitrary Code Execution vulnerability 0.2%