Hogash

9 CVEs across 2 Hogash products. Browse Hogash vulnerabilities, severities, and proof-of-concept exploits.

Hogash products with known CVEs

ProductCVEs
Kallyas5
Kallyas - Creative Ecommerce Multi-Purpose WordPress Theme4
Hogash CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-63061Medium6.52025-12-09Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hogash KALLYAS kallyas allows DOM-Based XSS.This issue af…
CVE-2025-63060Medium4.32025-12-09Cross-Site Request Forgery (CSRF) vulnerability in hogash KALLYAS kallyas allows Cross Site Request Forgery.This issue affects KALLYAS: from n/a through < 4.25…
CVE-2025-62018Medium5.32025-11-06Missing Authorization vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through <= 4.22.0.
CVE-2025-62017Medium5.42025-11-06Missing Authorization vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through <= 4.22.0.
CVE-2025-62016Critical9.92025-11-06Unrestricted Upload of File with Dangerous Type vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through <= 4.22.0.
CVE-2025-6990High8.82025-11-01The kallyas theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.0 via the `TH_PhpCode` pagebuilder widget. T…
CVE-2025-6988Medium6.42025-11-01The kallyas theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions up to, and including, 4.23…
CVE-2025-6991High7.52025-07-26The kallyas theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.21.0 via the 'TH_LatestPosts4` widget. This makes…
CVE-2025-6989High8.12025-07-26The Kallyas theme for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the delete_font() function in all versio…