KL
Vendor
kleor
6
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109218 New | CM Contact Manager kleor | 9.8 | Oct 28 | Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass |
| CVE-2026-32517 | CM Contact Manager Kleor | 7.1 | Mar 25 | WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-68853 | CM Contact Manager Kleor | 8.8 | Feb 20 | WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability |
| CVE-2025-9519 | ET Easy Timer kleor | 7.2 | Sep 4 | Easy Timer <= 4.2.1 - Authenticated (Editor+) Remote Code Execution via Shortcode |
| CVE-2025-8783 | CM Contact Manager kleor | 4.4 | Aug 19 | Contact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title' |
| CVE-2025-1028 | CM Contact Manager kleor | 8.1 | Feb 5 | Contact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload |
