What’s Vulnerable › Products

Kleor Contact Manager vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Kleor Contact Manager version is affected

Latest Kleor Contact Manager vulnerabilities

• CVE-2026-109218 — Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass (CVSS 9.8)
• CVE-2026-32517 — WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-68853 — WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability (CVSS 8.8)
• CVE-2025-8783 — Contact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title' (CVSS 4.4)
• CVE-2025-1028 — Contact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload (CVSS 8.1)