CVE-2026-12721

CVE-2026-12721 affects the Kirki WordPress plugin (before 6.0.13). The issue arises from insufficient sanitisation/escaping of a value taken from the request prior to its use in a SQL statement, allowing unauthenticated SQL injection. The documentation provided does not specify affected versions ...