WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
kirki
Published
2026-07-06
Title
Kirki – Freeform Page Builder, Website Builder & Customizer < 6.0.12 - Unauthenticated Stored Cross-Site Scripting
Slug
kirki
Published
2026-07-06
Title
Kirki < 6.2.1 - Unauthenticated Missing Authorization
Slug
kirki
Published
2026-06-29
Title
Kirki < 6.0.12 - Unauthenticated HTML Injection in Password Reset Email via kirki-forgot-password
Slug
kirki
Published
2026-07-16
Title
Kirki < 6.0.14 - Editor+ Path Traversal to Arbitrary Directory Deletion via family
Slug
kirki
Published
2026-07-23
Title
Kirki < 6.1.0 - Unauthenticated Sensitive Data Disclosure via context Parameter
Slug
kirki
Published
2026-06-29
Title
Kirki < 6.0.12 - Unauthenticated Arbitrary Comment Modification and Moderation Bypass via Component Library
Slug
kirki
Published
2026-06-29
Title
Kirki < 6.0.12 - Unauthenticated Server-Side Request Forgery via kirki_get_apis
Slug
kirki
Published
2026-07-01
Title
Kirki < 6.0.12 - Unauthenticated Arbitrary Email Content Injection via emailBody and emailSubject Parameters
Slug
kirki
Published
2026-07-14
Title
Kirki < 6.0.13 - Unauthenticated PHP Object Injection
Slug
kirki
Published
2026-07-14
Title
Kirki < 6.0.13 - Unauthenticated SQL Injection
Slug
kirki
Published
2026-07-31
Title
Kirki < 6.1.0 - Editor+ Arbitrary File Write via Zip Slip
Slug
kirki
Published
2026-08-10
Title
Kirki < 6.2.1 - Contributor+ Stored XSS via post_meta Shortcode
Slug
kirki
Published
2026-08-15
Title
Kirki < 6.2.0 - Editor+ Arbitrary File Read via 'data' Parameter
Slug
kirki
Published
2026-08-15
Title
Kirki < 6.2.0 - Subscriber+ Sensitive User Data Disclosure via 'context' Parameter
Slug
kirki
Published
2026-08-18
Title
Kirki < 6.2.5 - Unauthenticated Stored XSS
Slug
kirki
Published
2026-08-10
Title
Kirki < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions
Slug
kirki
Published
2026-08-18
Title
Kirki < 6.2.3 - Editor+ Stored XSS via Font Zip Upload
Slug
kirki
Published
2026-08-24
Title
Kirki < 6.0.14 - Unauthenticated User and Comment Author Email Disclosure via kirki_get_apis
Slug
kirki
Published
2026-09-03
Title
Kirki 6.0.0 - 6.2.5 - Authenticated Collaboration Comment Status Modification via IDOR
Slug
kirki
Published
2026-09-03
Title
Kirki 6.0.0 - 6.2.5 - Editor+ SQLi via Content Manager Field ID
Slug
kirki
Published
2026-09-04
Title
Kirki 6.2.1 - 6.2.5 - Unauthenticated Stored XSS via HTML Entity Decoding
Slug
kish-guest-posting
Published
2014-08-01
Title
Kish Guest Posting 1.2 - Arbitrary File Upload
Slug
kitestudio-core
Published
2022-06-15
Title
Core Plugin for Kitestudio Themes < 2.3.1 - Reflected Cross-Site-Scripting
Slug
kittycatfish
Published
2026-06-09
Title
KittyCatfish <= 2.2 - Unauthenticated SQL Injection
Slug
kivicare-clinic-management-system
Published
2022-05-23
Title
KiviCare < 2.3.9 - Unauthenticated SQLi