TI-2026-51508 CVE-2026-73389 · GHSA-m7jf-qrf9-6rj3
WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability
Priority MEDIUM 50
Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.
The4
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
The4 records in CISA KEVNo The4 vulnerabilities are listed in CISA KEV.
Records
4 records
TI-2026-70398 CVE-2026-62076 · GHSA-cwfm-c9v7-xhqp
PHP object injection in WordPress Kalles theme
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.
TI-2026-56414 CVE-2026-81778 · GHSA-887x-36v4-4v45
WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions.
TI-2025-37436 CVE-2025-60070 · GHSA-qqq4-834c-75mv
WordPress Molla - Multipurpose Responsive Shopify theme <= 1.5.13 - Arbitrary Code Execution vulnerability
Priority LOW 28
Improper Control of Generation of Code ('Code Injection') vulnerability in The4 Molla molla allows Code Injection.This issue affects Molla: from n/a through <= 1.5.13.