Thème WordPress
Vulnérabilités KLEO – Community Focused & Multi-Purpose BuddyPress WordPress Theme
Cette page rassemble les failles publiées pour KLEO – Community Focused & Multi-Purpose BuddyPress WordPress Theme, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de KLEO – Community Focused & Multi-Purpose BuddyPress WordPress Theme
3 fiches
Kleo < 5.5.0 – Authenticated (Contributor+) Local File Inclusion
The Kleo theme for WordPress is vulnerable to Local File Inclusion in versions up to 5.5.0. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing…
[*, 5.5.0)
5.5.0
30/10/2025
KLEO < 5.4.4 – Missing Authorization
The KLEO – Community Focused & Multi-Purpose BuddyPress WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to 5.4.4 (exclusive). This makes it possible…
[*, 5.4.4)
5.4.4
29/04/2025
Kleo < 5.4.4 – Reflected Cross-Site Scripting
The Kleo theme for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to 5.4.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages…
[*, 5.4.4)
5.4.4
19/12/2024
Thèmes également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.