Advisories · Technology

Hogash KALLYAS.

Every CVE that names Hogash KALLYAS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112863 CVE record

CVSS 7.1 High

WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability
- Hogash KALLYAS
- Cross-site scripting (XSS)
Not analysed yet 23 Oct 2026
CVE-2025-63061 CVE record

CVSS 6.5 Medium

WordPress KALLYAS theme < 4.25.0 - Cross Site Scripting (XSS) vulnerability
- hogash KALLYAS
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2025
CVE-2025-63060 CVE record

CVSS 4.3 Medium

WordPress KALLYAS theme < 4.25.0 - Cross Site Request Forgery (CSRF) vulnerability
- hogash KALLYAS
- Cross-site request forgery (CSRF)
Not analysed yet 9 Dec 2025
CVE-2025-62018 CVE record

CVSS 5.3 Medium

WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability
- hogash KALLYAS
- Broken access control
Not analysed yet 6 Nov 2025
CVE-2025-62017 CVE record

CVSS 5.4 Medium

WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability
- hogash KALLYAS
- Broken access control
Not analysed yet 6 Nov 2025
CVE-2025-62016 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress Kallyas theme <= 4.22.0 - Arbitrary File Upload vulnerability
- hogash KALLYAS
- Unrestricted file upload
Not analysed yet 6 Nov 2025