CVE-2026-57725 WordPress Kirki plugin <= 6.0.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Kirki kirki allows Stored XSS.This issue affects Kirki: from n/a through = 6.0.11...

WordPress Kirki plugin <= 6.0.12 - SQL Injection vulnerability

SQL Injection vulnerability discovered by daroo in WordPress Plugin Kirki versions = 6.0.12...