kleor vulnerabilities
6 published CVEs name kleor among the affected products.
- 6Published CVEs6 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-109218
Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass
kleor · Contact Manager
Critical9.8 - CVE-2026-32517
WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability
Kleor · Contact Manager
High7.1 - CVE-2025-68853
WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability
Kleor · Contact Manager
High8.8 - CVE-2025-9519
Easy Timer <= 4.2.1 - Authenticated (Editor+) Remote Code Execution via Shortcode
kleor · Easy Timer
High7.2 - CVE-2025-8783
Contact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title'
kleor · Contact Manager
Medium4.4 - CVE-2025-1028
Contact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload
kleor · Contact Manager
High8.1