CVE-2025-63060: WordPress KALLYAS theme < 4.25.0 - Cross Site Request Forgery (CSRF) vulnerability
Published Dec 9, 2025
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in hogash KALLYAS kallyas allows Cross Site Request Forgery.This issue affects KALLYAS: from n/a through < 4.25.0.
Affected Software
1 affected component
hogash Kallyas<4.25.0
Event History
Dec 9, 2025
CVE Published
via MITRE·02:52 PM
Data Sourced
via MITRE·02:52 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:18 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-63060?
CVE-2025-63060 is classified as a high severity Cross-Site Request Forgery (CSRF) vulnerability.
2
How do I fix CVE-2025-63060?
To fix CVE-2025-63060, you should update the Kallyas theme to version 4.3 or later.
3
Which versions of Kallyas are affected by CVE-2025-63060?
CVE-2025-63060 affects Kallyas versions from n/a through 4.2.
4
What type of vulnerability is CVE-2025-63060?
CVE-2025-63060 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
Who is the vendor associated with CVE-2025-63060?
The vendor associated with CVE-2025-63060 is hogash, related to the Kallyas theme.