Hogash Kallyas vulnerabilities

• hogash kallyas WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-112863 7.1 HighOctober 23, 2026
• hogash kallyas WordPress KALLYAS theme < 4.25.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-63061 6.5 MediumDecember 9, 2025
• hogash kallyas WordPress KALLYAS theme < 4.25.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-63060 4.3 MediumDecember 9, 2025
• hogash kallyas WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability CVE-2025-62018 5.3 MediumNovember 6, 2025
• hogash kallyas WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability CVE-2025-62017 5.4 MediumNovember 6, 2025
• hogash kallyas WordPress Kallyas theme <= 4.22.0 - Arbitrary File Upload vulnerability CVE-2025-62016 9.9 CriticalNovember 6, 2025
• hogash kallyas - creative ecommerce multi-purpose wordpress theme Kallyas <= 4.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-6988 6.4 MediumNovember 1, 2025
• hogash kallyas - creative ecommerce multi-purpose wordpress theme Kallyas <= 4.24.0 - Authenticated (Contributor+) Remote Code Execution CVE-2025-6990 8.8 HighNovember 1, 2025
• hogash kallyas - creative ecommerce multi-purpose wordpress theme Kallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion CVE-2025-6991 7.5 HighJuly 26, 2025
• hogash kallyas - creative ecommerce multi-purpose wordpress theme Kallyas <= 4.21.0 - Authenticated (Contributor+) Arbitrary Folder Deletion CVE-2025-6989 8.1 HighJuly 26, 2025