CVE-2026-65436

Editor Arbitrary File Deletion in Kirki = 6.0.13 versions...

CVE-2026-57727 WordPress Kirki plugin <= 6.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kirki: from n/a through 6.2.0...

EUVD-2026-43375

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Kirki kirki allows Blind SQL Injection.This issue affects Kirki: from n/a through = 6.0.12...

PT-2026-57760

Name of the Vulnerable Software and Affected Versions Kirki versions prior to 6.1.2 Description A missing authorization check in a function allows unauthenticated attackers to exploit incorrectly configured access control security levels and perform unauthorized actions. Recommendations Update to...