What’s Vulnerable › Products

kalcaddle KodExplorer vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your kalcaddle KodExplorer version is affected

Latest kalcaddle KodExplorer vulnerabilities

• CVE-2026-116057 — KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload (CVSS 6.3)
• CVE-2026-116056 — KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery (CVSS 6.3)
• CVE-2026-104081 — KodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extraction (CVSS 8.1)
• CVE-2026-6571 — kodcloud KodExplorer systemRole.class.php roleGroupAction authorization (CVSS 6.3)
• CVE-2026-6570 — kodcloud KodExplorer systemMember.class.php initInstall authorization (CVSS 2.7)
• CVE-2026-6569 — kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication (CVSS 7.3)
• CVE-2026-6568 — kodcloud KodExplorer Public Share share.class.php initShareOld path traversal (CVSS 7.3)
• CVE-2025-34504 — KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint (CVSS 6.1)
• CVE-2023-49489 — (CVSS 6.1)
• CVE-2023-6853 — kalcaddle KodExplorer app.php index server-side request forgery (CVSS 9.8)
• CVE-2023-6852 — kalcaddle KodExplorer app.php server-side request forgery (CVSS 9.8)
• CVE-2023-6851 — kalcaddle KodExplorer ZIP Archive app.php unzipList code injection (CVSS 9.8)
• CVE-2023-6850 — kalcaddle KodExplorer API Endpoint unrestricted upload (CVSS 9.8)
• CVE-2021-36646 — (CVSS 6.1)
• CVE-2023-37153 — (CVSS 6.1)
• CVE-2022-4944 — kalcaddle KodExplorer cross-site request forgery (CVSS 8.8)
• CVE-2022-46154 — Arbitrary file access in KodExplorer (CVSS 7.5)