CVE-2025-62018: WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability
Published Nov 6, 2025
·Updated
Missing Authorization vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through <= 4.22.0.
Affected Software
1 affected component
hogash Kallyas<=4.22.0
Event History
Nov 6, 2025
CVE Published
via MITRE·03:55 PM
Data Sourced
via MITRE·03:55 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-62018?
CVE-2025-62018 is considered a high-severity vulnerability due to missing authorization in the Hogash Kallyas theme.
2
How do I fix CVE-2025-62018?
To fix CVE-2025-62018, you need to update the Hogash Kallyas theme to a version higher than 4.22.0.
3
What impact does CVE-2025-62018 have on my website?
CVE-2025-62018 can potentially allow unauthorized users to access restricted areas of your site, leading to data breaches.
4
Which versions of Kallyas are affected by CVE-2025-62018?
CVE-2025-62018 affects the Kallyas theme versions from n/a up to and including 4.22.0.
5
Is CVE-2025-62018 related to WordPress?
Yes, CVE-2025-62018 is applicable to the WordPress Kallyas theme, which is built by Hogash.