Skip to content
OpenAdvisories

Product · Themeum

Kirki

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-112348

    Kirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing Token

    Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated attackers to submit frontend forms without valid verification by omitting the g-recaptcha-token field from POST requests to the form submission endpo…

    Themeum Kirki Web / CMS
  • Medium 4.3
    CVE-2026-42694

    WordPress Kirki plugin <= 6.4.0 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki allows Code Injection.This issue affects Kirki: from n/a through 6.4.0.

    Themeum Kirki
  • Medium 6.8
    CVE-2026-65436

    WordPress Kirki plugin <= 6.0.13 - Arbitrary File Deletion vulnerability

    Editor Arbitrary File Deletion in Kirki <= 6.0.13 versions.

    Themeum Kirki
  • Medium 6.5
    CVE-2026-57680

    WordPress Kirki plugin <= 6.0.11 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions.

    Themeum Kirki
  • Medium 4.9
    CVE-2026-57627

    WordPress Kirki plugin <= 6.0.11 - Server Side Request Forgery (SSRF) vulnerability

    Subscriber Server Side Request Forgery (SSRF) in Kirki <= 6.0.11 versions.

    Themeum Kirki