CVE-2025-53347

Cross-Site Request Forgery CSRF vulnerability in Laborator Kalium kalium allows Cross Site Request Forgery.This issue affects Kalium: from n/a through = 3.18.3...

CVE-2025-53347 WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Laborator Kalium kalium allows Cross Site Request Forgery.This issue affects Kalium: from n/a through = 3.18.3...

CVE-2025-53347 WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Laborator Kalium kalium allows Cross Site Request Forgery.This issue affects Kalium: from n/a through = 3.18.3...

CVE-2025-53347

CVE-2025-53347 (Kalium) is a CSRF vulnerability in the Kalium WordPress theme (and related plugin) versions n/a through 3.18.3. The CVE notes that unauthenticated attackers cannot exploit it directly, but the related CVE metrics show an attack vector of network with user interaction required and ...

WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Kalium versions = 3.18.3...

WordPress plugin Kalium 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

PT-2025-33375 · Laborator · Kalium

Name of the Vulnerable Software and Affected Versions: Kalium versions n/a through 3.18.3 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Laborator Kalium, allowing attackers to perform actions on behalf of authenticated users. Recommendations: Update Kalium to a version...

WordPress Kalium Theme <= 3.18.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Kalium Type Theme Vulnerable versions = 3.18.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-53347 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 959fedc4e441 Credits Ananda Dhakal Patchstack...

WordPress Kalium theme <= 3.25 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Kalium versions = 3.25...

WordPress Kalium Theme <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Theme Kalium versions = 3.18.3...

CVE-2020-24075

Cross Site Scripting XSS vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code...

Cross site scripting

Cross Site Scripting XSS vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code...

Laborator Kalium Cross-Site Scripting Vulnerability

Laborator Kalium is a WordPress theme by Laborator. A cross-site scripting vulnerability exists in Laborator Kalium prior to version 3.0.4, which stems from a cross-site scripting XSS vulnerability in the name input field of a Contact Us form, allowing remote attackers to execute arbitrary code...

CVE-2020-24075

CVE-2020-24075 describes a cross-site scripting (XSS) vulnerability in the Laborator Kalium WordPress theme (before 3.0.4). The flaw resides in the Name Input Field of the Contact Us form, allowing remote attackers to execute arbitrary code in the context of a victim’s browser. Public sources con...

CVE-2020-24075

Cross Site Scripting XSS vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code...

CVE-2020-24075

Cross Site Scripting XSS vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code...