Description
Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themeum | Kirki | ≤ 6.0.11 | — |
Medium · 6.5
CVE-2026-57680
EUVD-2026-41289GHSA-vj33-3xg6-g6ww
WordPress Kirki plugin <= 6.0.11 - Insecure Direct Object References (IDOR) vulnerability
Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by Patchstack