Log in Start free

Kleor

Products

ProductCVEsExploitedLatest
Contact Manager5–Oct 28, 2026
Easy Timer1–Sep 4, 2025

Exploited and recent CVEs

  • CVE-2026-109218 Critical 9.8 Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass 0.6%
  • CVE-2026-32517 High 7.1 WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68853 High 8.8 WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-9519 High 7.2 Easy Timer <= 4.2.1 - Authenticated (Editor+) Remote Code Execution via Shortcode 0.9%
  • CVE-2025-8783 Medium 4.4 Contact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title' 0.3%
  • CVE-2025-1028 High 8.1 Contact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload 0.8%