Kleor vulnerabilities

Products

• Contact Manager 5

Newest

• kleor contact manager Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass CVE-2026-109218 9.8 CriticalOctober 28, 2026
• kleor contact manager WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-32517 7.1 HighMarch 25, 2026
• kleor contact manager WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability CVE-2025-68853 8.8 HighFebruary 20, 2026
• kleor easy timer Easy Timer <= 4.2.1 - Authenticated (Editor+) Remote Code Execution via Shortcode CVE-2025-9519 Public exploit 7.2 HighSeptember 4, 2025
• kleor contact manager Contact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title' CVE-2025-8783 4.4 MediumAugust 19, 2025
• kleor contact manager Contact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload CVE-2025-1028 8.1 HighFebruary 5, 2025