WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kirki
Published
2026-06-29
Title
Kirki < 6.0.12 - Unauthenticated Arbitrary Comment Modification and Moderation Bypass via Component Library
Slug
kirki
Published
2026-06-29
Title
Kirki < 6.0.12 - Unauthenticated Server-Side Request Forgery via kirki_get_apis
Slug
kirki
Published
2026-07-01
Title
Kirki < 6.0.12 - Unauthenticated Arbitrary Email Content Injection via emailBody and emailSubject Parameters
Slug
kirki
Published
2026-07-14
Title
Kirki < 6.0.13 - Unauthenticated PHP Object Injection
Slug
kirki
Published
2026-07-14
Title
Kirki < 6.0.13 - Unauthenticated SQL Injection
Slug
kirki
Published
2026-07-31
Title
Kirki < 6.1.0 - Editor+ Arbitrary File Write via Zip Slip
Slug
kirki
Published
2026-08-10
Title
Kirki < 6.2.1 - Contributor+ Stored XSS via post_meta Shortcode
Slug
kirki
Published
2026-08-15
Title
Kirki < 6.2.0 - Editor+ Arbitrary File Read via 'data' Parameter
Slug
kirki
Published
2026-08-15
Title
Kirki < 6.2.0 - Subscriber+ Sensitive User Data Disclosure via 'context' Parameter
Slug
kirki
Published
2026-08-18
Title
Kirki < 6.2.5 - Unauthenticated Stored XSS
Slug
kirki
Published
2026-08-10
Title
Kirki < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions
Slug
kirki
Published
2026-09-10
Title
Kirki < 6.2.1 - Unauthenticated Stored XSS via 'comment' Parameter
Slug
kirki
Published
2026-08-18
Title
Kirki < 6.2.3 - Editor+ Stored XSS via Font Zip Upload
Slug
kirki
Published
2026-08-24
Title
Kirki < 6.0.14 - Unauthenticated User and Comment Author Email Disclosure via kirki_get_apis
Slug
kirki
Published
2026-09-23
Title
Kirki < 6.2.1 - Unauthenticated Blind SSRF via 'kirki_data' Parameter
Slug
kirki
Published
2026-10-14
Title
Kirki < 6.2.1 - Authenticated Stored XSS via Page Builder Text Content
Slug
kirki
Published
2026-09-03
Title
Kirki 6.0.0 - 6.2.5 - Authenticated Collaboration Comment Status Modification via IDOR
Slug
kirki
Published
2026-09-07
Title
Kirki 6.2.1 - 6.2.5 - Unauthenticated Non-Public Post Content Disclosure via 'kirki_data' Parameter
Slug
kirki
Published
2026-09-03
Title
Kirki 6.0.0 - 6.2.5 - Editor+ SQLi via Content Manager Field ID
Slug
kirki
Published
2026-09-04
Title
Kirki 6.2.1 - 6.2.5 - Unauthenticated Stored XSS via HTML Entity Decoding
Slug
kirki
Published
2026-10-30
Title
Kirki < 6.4.1 - Editor+ Missing Authorization
Slug
kirki
Published
2026-10-30
Title
Kirki < 6.2.5 - Unauthenticated reCAPTCHA Validation Bypass
Slug
kirki
Published
2026-10-29
Title
Kirki < 6.4.1 - Subscriber+ Arbitrary Page Content Injection
Slug
kirki
Published
2026-09-18
Title
Kirki 6.0.0 - 6.3.0 - Author+ Stored XSS via Unsanitized SVG Upload
Slug
kirki
Published
2026-10-06
Title
Kirki < 6.3.2 - Unauthenticated Stored XSS via Registration Metadata