WordPress Theme Vulnerabilities

Slug
Published
Title
Slug
kaffen
Published
2025-05-20
Title
Multiple Themes by bslthemes - Unauthenticated Local File Inclusion
Slug
kahuna
Published
2024-08-29
Title
Kahuna < 1.7.0.1 - Contributor+ Stored XSS
Slug
kalium
Published
2025-08-14
Title
Kalium < 3.19 - Cross-Site Request Forgery
Slug
kalium
Published
2025-08-21
Title
Kalium < 3.19 - Missing Authorization
Slug
kalium
Published
2025-06-19
Title
Kalium < 3.26 - Unauthenticated Arbitrary Code Execution
Slug
kalium
Published
2025-01-04
Title
Kalium < 3.19 - Reflected Cross-Site Scripting
Slug
kalium
Published
2026-01-15
Title
Kalium < 3.30 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_request
Slug
kallyas
Published
2025-07-25
Title
Kallyas < 4.22.0 - Authenticated (Contributor+) Arbitrary Folder Deletion
Slug
kallyas
Published
2025-07-25
Title
Kallyas < 4.22.0 - Authenticated (Contributor+) Local File Inclusion
Slug
kallyas
Published
2025-10-16
Title
Kallyas < 4.23.0 - Missing Authorization
Slug
kallyas
Published
2025-10-16
Title
Kallyas < 4.23.0 - Missing Authorization
Slug
kallyas
Published
2025-10-31
Title
Kallyas <= 4.24.0 - Authenticated (Contributor+) Remote Code Execution
Slug
kallyas
Published
2025-10-31
Title
Kallyas < 4.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kallyas
Published
2025-09-06
Title
Kallyas < 4.23.0 - Authenticated (Contributor+) Arbitrary File Upload
Slug
kallyas
Published
2025-10-16
Title
Kallyas <= 4.22.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
kalon
Published
2026-02-18
Title
Kalon < 1.3.0 - Missing Authorization
Slug
kamperen
Published
2026-03-23
Title
Kamperen < 1.3 - Unauthenticated PHP Object Injection
Slug
kapee
Published
2026-04-22
Title
Kapee < 1.7.0 - Unauthenticated PHP Object Injection
Slug
kapee
Published
2026-04-23
Title
Kapee < 1.7.1 - Unauthenticated Stored Cross-Site Scripting
Slug
karzo
Published
2025-10-12
Title
Karzo < 2.6 - Unauthenticated Local File Inclusion
Slug
kastell
Published
2026-06-12
Title
Kastell < 2.0.1 - Unauthenticated Local File Inclusion
Slug
kata
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
kata-app
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
kata-business
Published
2023-08-14
Title
Multiple Themes - Reflected XSS
Slug
katelyn
Published
2025-08-04
Title
Katelyn <= 1.0.10 - Unauthenticated Local File Inclusion