Browse all 3 CVE security advisories affecting Climax Themes. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Climax Themes develops WordPress themes and plugins for website building, with three CVEs recorded. Historically, vulnerabilities include remote code execution, cross-site scripting, and privilege escalation, often stemming from insufficient input validation and improper access controls. Security characteristics include regular updates but occasional critical flaws in file handling and authentication mechanisms. No major public incidents have been documented, though the presence of multiple CVEs indicates ongoing security challenges. The themes' popularity makes them attractive targets, requiring users to maintain vigilance with patches and security best practices to mitigate potential exploitation risks.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-50009 | WordPress Kata Plus plugin <= 1.5.3 - Broken Access Control Vulnerability — Kata PlusCWE-862 | 5.4 | Medium | 2025-06-20 |
| CVE-2025-32572 | WordPress Kata Plus Plugin <= 1.5.3 - PHP Object Injection vulnerability — Kata PlusCWE-502 | 9.8 | Critical | 2025-04-17 |
| CVE-2024-50501 | WordPress Kata Plus plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability — Kata PlusCWE-79 | 6.5 | Medium | 2024-10-28 |
This page lists every published CVE security advisory associated with Climax Themes. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.