https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T04:41:12.048274+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cnvd-2025-27244 cnvd-2025-27244 2026-09-29T04:41:12.068682+00:00 cnvd-2025-27244 https://db.gcve.eu/vuln/fkie_cve-2025-6990 fkie_cve-2025-6990 2026-09-29T04:41:12.068741+00:00

The kallyas theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.0 via the `TH_PhpCode` pagebuilder widget. This is due to the theme not restricting access to the code editor widget for non-administrators. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.

 https://db.gcve.eu/vuln/ghsa-2cxc-vpf5-w9j6 GHSA-2cxc-vpf5-w9j6 2026-09-29T04:41:12.068782+00:00

The kallyas theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.0 via the `TH_PhpCode` pagebuilder widget. This is due to the theme not restricting access to the code editor widget for non-administrators. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.