CVE-2025-62017: WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability
Published Nov 6, 2025
·Updated
Missing Authorization vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through <= 4.22.0.
Affected Software
1 affected component
hogash Kallyas<=4.22.0
Event History
Nov 6, 2025
CVE Published
via MITRE·03:55 PM
Data Sourced
via MITRE·03:55 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-62017?
CVE-2025-62017 is classified as a missing authorization vulnerability affecting Kallyas theme versions up to 4.22.0.
2
How do I fix CVE-2025-62017?
To fix CVE-2025-62017, update the Kallyas theme to the latest version available that addresses this vulnerability.
3
What systems are affected by CVE-2025-62017?
CVE-2025-62017 affects the hogash Kallyas theme and the WordPress Kallyas theme up to version 4.22.0.
4
What is a missing authorization vulnerability like CVE-2025-62017?
A missing authorization vulnerability like CVE-2025-62017 allows users to access restricted features without proper permissions.
5
Is there a workaround for CVE-2025-62017 before applying a patch?
Currently, there are no known workarounds for CVE-2025-62017, so updating the theme is recommended.