Read the docs

ThemeKalia

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

ThemeKalia records in CISA KEV

No ThemeKalia vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-10764 CVE-2024-11617 · GHSA-c5jj-9wj5-5cv4

Envolve Plugin <= 1.0 - Unauthenticated Arbitrary File Upload via language_file and fonts_file

Priority MEDIUM 52

The Envolve Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'zetra_languageUpload' and 'zetra_fontsUpload' functions in all versions up to, and including, 1.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01433 Published 2025-05-09 No fix listed CWE-434
TI-2024-10762 CVE-2024-11615 · GHSA-hcf7-pvq8-wh55

Envolve Plugin <= 1.0 - Unauthenticated Language File Deletion

Priority LOW 30

The Envolve Plugin plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.0 via the 'zetra_deleteLanguageFile' and 'zetra_deleteFontsFile' functions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00425 Published 2025-05-05 No fix listed CWE-22
Open these records in search →