Hogash
9 CVEs across 2 Hogash products. Browse Hogash vulnerabilities, severities, and proof-of-concept exploits.
Hogash products with known CVEs
Hogash CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-63061 | Medium | 6.5 | 2025-12-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hogash KALLYAS kallyas allows DOM-Based XSS.This issue af… |
CVE-2025-63060 | Medium | 4.3 | 2025-12-09 | Cross-Site Request Forgery (CSRF) vulnerability in hogash KALLYAS kallyas allows Cross Site Request Forgery.This issue affects KALLYAS: from n/a through < 4.25… |
CVE-2025-62018 | Medium | 5.3 | 2025-11-06 | Missing Authorization vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through <= 4.22.0. |
CVE-2025-62017 | Medium | 5.4 | 2025-11-06 | Missing Authorization vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through <= 4.22.0. |
CVE-2025-62016 | Critical | 9.9 | 2025-11-06 | Unrestricted Upload of File with Dangerous Type vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through <= 4.22.0. |
CVE-2025-6990 | High | 8.8 | 2025-11-01 | The kallyas theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.0 via the `TH_PhpCode` pagebuilder widget. T… |
CVE-2025-6988 | Medium | 6.4 | 2025-11-01 | The kallyas theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions up to, and including, 4.23… |
CVE-2025-6991 | High | 7.5 | 2025-07-26 | The kallyas theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.21.0 via the 'TH_LatestPosts4` widget. This makes… |
CVE-2025-6989 | High | 8.1 | 2025-07-26 | The Kallyas theme for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the delete_font() function in all versio… |