KF
Product
Kirki – Freeform Page Builder, Website Builder & Customizer
19
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
VulnerabilityCritical
Critical Kirki flaw exploited to hijack WordPress admin accounts
Hackers are exploiting a critical privilege escalation vulnerability (CVE-2026-8206) in the Kirki plugin for WordPress to take over any user account, including those belonging to administrators. [...]
Jun 2, 2026·BleepingComputer