The4 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting The4 products: 4 record(s), with severity, exploitation and fixes.

Kalles Addons 2 Molla 1 Kalles 1

Exploited only (KEV) →

CVE-2026-62076 Critical · 9.8 CWE-502 Oct 10, 2026

WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.

CVE-2026-81778 Medium · 6.5 CWE-79 Aug 31, 2026

WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions.

CVE-2026-73389 Critical · 9.8 CWE-502 Aug 19, 2026

WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.

CVE-2025-60070 Medium · 6.5 CWE-94 Dec 18, 2025

WordPress Molla - Multipurpose Responsive Shopify theme <= 1.5.13 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in The4 Molla molla allows Code Injection.This issue affects Molla: from n/a through <= 1.5.13.