Kalon
Kalon has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Kalon has a vendor fix available, so running the current release closes it.
All of these findings were reported by Trương Hữu Phúc (truonghuuphuc). Kalon is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2026-32376Kalon <= 1.2.9 - Missing Authorization
Read the full analysisVulnerability Records

Kalon
Author
Rara Themes
Kalon is a feminine WordPress blog theme that can be used for building lively and eye-catching websites. It provides a simple, clean, minimal and modern look that can be used for any kind of personal blog related to photography, nature, art, design, lifestyle, food, fashion, babies, kids, wedding or any other creative websites. The design is responsive and shows very well in mobile and tablet devices. The clean typography and spacious layout make it great to share your stories. Kalon incorporates latest web standards such as HTML5 and CSS3 and is SEO friendly design to help you quickly rank in google. Kalon is a Cross-Browser Compatible theme that works on All leading web browsers.The theme comes with the great features and easy to use Option Panel. The Theme comes with full-screen slider, social icon integration, custom menu, plenty of widget areas and custom widgets. The theme is rigorously tested and optimized for speed and faster page load time and has a secure and clean code. The theme is also translation ready. Demo at: https://rarathemes.com/previews/?theme=kalon, Documentation at https://docs.rarathemes.com/docs/kalon/ and Support at https://rarathemes.com/support-forum/.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C