CVE-2026-84225

The Kirki WordPress plugin (versions 6.0.0–6.2.5 ) contains an authenticated IDOR flaw in its collaboration comment handling. The plugin fails to verify that a user is authorized to act on a specific collaboration comment before changing its state, allowing users with content-level page-builder a...