Hogash Kallyas WordPress Theme Cross-Site Request Forgery Vulnerability

Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Hogash Kallyas WordPress theme, specifically in versions through 4.2. This vulnerability allows attackers to trick users into performing actions they did not intend to, potentially leading to unauthorized changes or actions within the user's account.

Impact

Exploitation of this vulnerability could allow attackers to perform actions on behalf of users, potentially leading to unauthorized changes or modifications within the WordPress site.

Added: Dec 9, 2025, 6:44 PM
Updated: Dec 9, 2025, 6:44 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
6.4
remediation
0.0
relevance
1.3
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.