Kirki < 6.0.14 - Editor+ Path Traversal to Arbitrary Directory Deletion via family

Description

The plugin is vulnerable to Directory Traversal via the family parameter due to insufficient validation of a user-supplied path. This makes it possible for authenticated attackers, with Editor-level access and above, to delete arbitrary directories on the server, which can result in loss of data and site availability.