Login Request a demo
KI
Product
Kirki
by Themeum · last CVE Oct 3, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 4Medium 3Low 0
Severity
All severities9Critical2High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Kirki to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-57724
9.8
1%
Jul 13
WordPress Kirki plugin <= 6.0.12 - PHP Object Injection vulnerability
Affected: through 6.0.12
CVE-2026-57726
9.3
0%
Jul 13
WordPress Kirki plugin <= 6.0.12 - SQL Injection vulnerability
Affected: through 6.0.12
CVE-2026-103065
8.2
0%
Oct 3
WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability
Affected: through 6.3.1
CVE-2026-57727
7.5
0%
Jul 13
WordPress Kirki plugin <= 6.2.0 - Broken Access Control vulnerability
Affected: through 6.2.0
CVE-2026-66629
7.1
0%
Aug 18
WordPress Kirki plugin <= 6.2.3 - Cross Site Scripting (XSS) vulnerability
Affected: through 6.2.3
CVE-2026-57725
7.1
0%
Jul 13
WordPress Kirki plugin <= 6.0.11 - Cross Site Scripting (XSS) vulnerability
Affected: through 6.0.11
CVE-2026-65436
6.8
1%
Jul 27
WordPress Kirki plugin <= 6.0.13 - Arbitrary File Deletion vulnerability
Affected: through 6.0.13
CVE-2026-57680
6.5
0%
Jul 2
WordPress Kirki plugin <= 6.0.11 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 6.0.11
CVE-2026-57627
4.9
0%
Jun 26
WordPress Kirki plugin <= 6.0.11 - Server Side Request Forgery (SSRF) vulnerability
Affected: through 6.0.11
Showing 9