Description
Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The4 | Kalles Addons | ≤ 1.0.6 | — |
Medium · 6.5
CVE-2026-81778
EUVD-2026-68791GHSA-887x-36v4-4v45
WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
Published Aug 31, 2026 · Updated Sep 1, 2026 · Assigned by Patchstack