Read the docs

Climax Themes

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Climax Themes records in CISA KEV

No Climax Themes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Kata 1 record LOW Kata Plus 1 record LOW

Records

5 records

TI-2025-23637 CVE-2025-32572 · GHSA-fxwh-c962-39r5

WordPress Kata Plus Plugin <= 1.5.3 - PHP Object Injection vulnerability

Priority MEDIUM 50

Deserialization of Untrusted Data vulnerability in Climax Themes Kata Plus kata-plus allows Object Injection.This issue affects Kata Plus: from n/a through <= 1.5.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00627 Published 2025-04-17 No fix listed CWE-502
TI-2023-02635 CVE-2023-2813 · GHSA-8mw6-p3x4-67qj

Multiple Themes - Reflected XSS

Priority LOW 29

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01011 Published 2023-09-04 Fixed in 1.1.13, 1.8.6 +19
TI-2024-33931 CVE-2024-50501 · GHSA-fm77-2jxq-m577

WordPress Kata Plus plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Climax Themes Kata Plus kata-plus allows DOM-Based XSS.This issue affects Kata Plus: from n/a through <= 1.4.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0027 Published 2024-10-28 No fix listed CWE-79
TI-2024-08699 CVE-2024-9376 · GHSA-hxrc-fgfq-3wq9

Cross-site scripting in Climax Themes Kata Plus – Addons for Elementor – Widgets…

Priority LOW 28

The Kata Plus – Addons for Elementor – Widgets, Extensions and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.4.7 due to insuffici…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00363 Published 2024-10-29 No fix listed CWE-79
TI-2025-31922 CVE-2025-50009 · GHSA-fqxr-374p-5cgx

WordPress Kata Plus plugin <= 1.5.3 - Broken Access Control Vulnerability

Priority LOW 24

Missing Authorization vulnerability in Climax Themes Kata Plus kata-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kata Plus: from n/a through <= 1.5.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0032 Published 2025-06-20 No fix listed CWE-862
Open these records in search →