GCVE - cpe:2.3:a:laborator:kalium:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:laborator:kalium:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Laborator (`ff987cbc-8417-5138-ac53-b788b229b9f1`)
Product	Kalium (`2a76bbb1-58f4-5c29-88b2-2d42c1436b80`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-53349`	vulnerable	2026-06-08 07:31:14.433732	WordPress Kalium Theme <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability HIGH (7.1) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laborator Kalium kalium allows Reflected XSS.This issue affects Kalium: from n/a through <= 3.18.3. Published: 2025-11-06T15:54:06.581Z Updated: 2026-04-28T16:13:24.388Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/kalium/vulnerability/wordpress-kalium-theme-3-18-3-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-53348`	vulnerable	2026-06-08 07:31:14.433490	WordPress Kalium Theme <= 3.18.3 - Broken Access Control Vulnerability MEDIUM (5.3) Missing Authorization vulnerability in Laborator Kalium kalium allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kalium: from n/a through <= 3.18.3. Published: 2025-09-09T16:25:33.561Z Updated: 2026-04-29T09:51:55.580Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/kalium/vulnerability/wordpress-kalium-theme-3-18-3-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-53347`	vulnerable	2026-06-08 07:31:14.433176	WordPress Kalium Theme <= 3.18.3 - Cross Site Request Forgery (CSRF) Vulnerability MEDIUM (4.3) Cross-Site Request Forgery (CSRF) vulnerability in Laborator Kalium kalium allows Cross Site Request Forgery.This issue affects Kalium: from n/a through <= 3.18.3. Published: 2025-08-14T18:21:54.102Z Updated: 2026-04-28T16:13:24.211Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/kalium/vulnerability/wordpress-kalium-theme-plugin-3-18-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49926`	vulnerable	2026-06-08 07:29:15.116525	WordPress Kalium theme <= 3.25 - Arbitrary Code Execution vulnerability HIGH (7.2) Improper Control of Generation of Code ('Code Injection') vulnerability in Laborator Kalium kalium allows Code Injection.This issue affects Kalium: from n/a through <= 3.25. Published: 2025-10-22T14:32:14.208Z Updated: 2026-04-28T16:13:07.897Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/kalium/vulnerability/wordpress-kalium-theme-3-25-arbitrary-code-execution-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24075`	vulnerable	2026-06-08 05:22:32.332159	Details available Cross Site Scripting (XSS) vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code. Published: 2023-08-11T00:00:00.000Z Updated: 2024-10-09T19:26:16.856Z Open on db.gcve.eu Reference links https://documentation.laborator.co/kb/kalium/kalium-changelog/#version-3-0-4-jun-23-2020	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.