Description
Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The4 | Kalles Addons | ≤ 1.0.6 | — |
Critical · 9.8
CVE-2026-73389
EUVD-2026-62390GHSA-m7jf-qrf9-6rj3
WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability
Published Aug 19, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack