27 matches found
CVE-2026-62076
Unauthenticated PHP Object Injection in Kalles = 1.1.7.1 versions...
EUVD-2026-96488
Unauthenticated PHP Object Injection in Kalles = 1.1.7.1 versions...
CVE-2026-62076 WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Kalles = 1.1.7.1 versions...
CVE-2026-62076
The WordPress Kalles theme (versions
WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Kalles versions = 1.1.7.1...
CVE-2026-81778
Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...
EUVD-2026-68791
Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...
CVE-2026-81778 WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...
CVE-2026-81778 WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...
CVE-2026-81778
CVE-2026-81778 affects the Kalles Addons WordPress plugin in versions 1.0.6 and earlier . The vulnerability is a Cross Site Scripting (XSS) flaw in the plugin's Subscriber functionality. The CVSS v3.1 score is 6.5 (MEDIUM) with a Changed Scope vector (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)...
WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Kalles Addons versions = 1.0.6...
CVE-2026-81778: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...
PT-2026-84016
Name of the Vulnerable Software and Affected Versions Kalles Addons versions prior to 1.0.7 Description Cross Site Scripting XSS exists in the subscriber functionality, allowing an attacker to execute malicious scripts in the browser of other users. Recommendations Update Kalles Addons to version...
CVE-2026-78572
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
EUVD-2026-65355
The Kalles Addons plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.6 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software,...
CVE-2026-78572
...
CVE-2026-78572
The Kalles Addons plugin for WordPress (versions up to and including 1.0.6 ) is vulnerable to PHP Object Injection via deserialization of untrusted input, allowing unauthenticated attackers to inject a PHP Object. No known POP chain exists within the plugin itself, so impact depends on whether an...
PT-2026-81250
Name of the Vulnerable Software and Affected Versions Kalles Addons versions prior to 1.0.7 Description The Kalles Addons plugin for WordPress is susceptible to PHP Object Injection due to the deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. The...