CVE-2026-84225

CVE-2026-84225 affects the Kirki WordPress plugin versions 6.0.0 through 6.2.5 . The vulnerability is an IDOR (Insecure Direct Object Reference) in the collaboration comment feature: the plugin does not verify that a user is authorized to act on a collaboration comment before changing its state. ...