KL
Vendor
kleor
2 products with CVEs on record
6
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109218
New
CM
Contact Manager
kleor
9.8
1%
Oct 28Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass
CVE-2026-32517
CM
Contact Manager
Kleor
7.1
0%
Mar 25WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-68853
CM
Contact Manager
Kleor
8.8
0%
Feb 20WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability
CVE-2025-9519
ET
Easy Timer
kleor
7.2
1%
Sep 4Easy Timer <= 4.2.1 - Authenticated (Editor+) Remote Code Execution via Shortcode
CVE-2025-8783
CM
Contact Manager
kleor
4.4
0%
Aug 19Contact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title'
CVE-2025-1028
CM
Contact Manager
kleor
8.1
1%
Feb 5Contact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload