CVE-2025-62016: WordPress Kallyas theme <= 4.22.0 - Arbitrary File Upload vulnerability
Published Nov 6, 2025
·Updated
Unrestricted Upload of File with Dangerous Type vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through <= 4.22.0.
Affected Software
1 affected component
Hogash KALLYAS (WordPress theme)<=4.22.0
Event History
Nov 6, 2025
CVE Published
via MITRE·03:55 PM
Data Sourced
via MITRE·03:55 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-62016?
CVE-2025-62016 is classified as a critical vulnerability due to its potential to allow the unrestricted upload of dangerous file types.
2
How do I fix CVE-2025-62016?
To fix CVE-2025-62016, users should update the Kallyas theme to version 4.22.1 or later.
3
What type of vulnerability is CVE-2025-62016?
CVE-2025-62016 is an unrestricted file upload vulnerability that can lead to code execution.
4
Which versions of Kallyas are affected by CVE-2025-62016?
CVE-2025-62016 affects Kallyas versions from n/a through 4.22.0.
5
What are the risks associated with CVE-2025-62016?
The risks of CVE-2025-62016 include unauthorized access to the server and potential takeover of the website through malicious file uploads.