Skip to content
OpenAdvisories

Vendor

Themeum

146 known vulnerabilities.

Products

Tutor LMS – eLearning and online course solution 48 Tutor LMS 22 Kirki – Freeform Page Builder, Website Builder & Customizer 19 WP Crowdfunding 13 Kirki 12 Tutor LMS Pro 9 Tutor LMS Elementor Addons 6 Qubely 5 Droip 2 Tutor LMS – Migration Tool 2 Qubely – Advanced Gutenberg Blocks 2 WP Mega Menu 2 Skillate 1 WP Page Builder (WordPress plugin) 1 Right Way 1 Tutor LMS BunnyNet Integration 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-8206 Public exploit

    Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'

    The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions 6.0.0 to 6.0.6. This is due to the plugin accepting an arbitrary email address when a username is u…

    Themeum Kirki – Freeform Page Builder, Website Builder & Customizer Web / CMS