A vulnerability was found in Kallyas Plugin up to 4.21.0 on WordPress and classified as critical. Affected by this issue is the function
TH_LatestPosts4. The manipulation leads to file inclusion.
This vulnerability is handled as CVE-2025-6991. The attack may be launched remotely. There is no exploit available.
