CyberSecBulletin

ThemeKalia vulnerabilities

We track 1 vulnerability in ThemeKalia products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 9, 2025.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest ThemeKalia vulnerabilities

  • 9.8 Critical severity

    Envolve Plugin: Unrestricted Upload of File with Dangerous Type

    CVE-2024-11617ThemeKaliaEPSS 1.46%

    The Envolve Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'zetra_languageUpload' and 'zetra_fontsUpload' functions in all versions up to, and including, 1.0. This makes it possible for unauthenti