Hogash CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Hogash CVE published 2026-10-23

CVE-2026-112863

The CVE-2026-112863 vulnerability is a Cross Site Scripting (XSS) issue affecting the KALLYAS theme for WordPress, versions up to 4.25.0. This vulnerability is due to improper neutralization of input during web page generation, allowing for Reflected XSS attacks. Defenders should verify exposure of WordPress installations using the KALLYAS theme version 4.25.0 or earlier and assess the need for updates or [truncated]