Description
Subscriber Server Side Request Forgery (SSRF) in Kirki <= 6.0.11 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themeum | Kirki | ≤ 6.0.11 | — |
Medium · 4.9
CVE-2026-57627
EUVD-2026-39743GHSA-49ff-frjv-g5x5
WordPress Kirki plugin <= 6.0.11 - Server Side Request Forgery (SSRF) vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack