Skip to content
OpenAdvisories

Vendor

Climax Themes

4 known vulnerabilities.

Products

Kata Plus 3 Kata Plus – Addons for Elementor – Widgets, Extensions and Templates 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-50009

    WordPress Kata Plus plugin <= 1.5.3 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Climax Themes Kata Plus kata-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kata Plus: from n/a through <= 1.5.3.

    Climax Themes Kata Plus
  • Medium 6.4
    CVE-2024-9376

    Kata Plus – Addons for Elementor – Widgets, Extensions and Templates <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Kata Plus – Addons for Elementor – Widgets, Extensions and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escap…

    Climax Themes Kata Plus – Addons for Elementor – Widgets, Extensions and Templates Web / CMS
  • Medium 6.5
    CVE-2024-50501

    WordPress Kata Plus plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Climax Themes Kata Plus kata-plus allows DOM-Based XSS.This issue affects Kata Plus: from n/a through <= 1.4.7.

    Climax Themes Kata Plus