What’s Vulnerable › Products

Themeum Kirki vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Themeum Kirki version is affected

Latest Themeum Kirki vulnerabilities

• CVE-2026-103065 — WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability (CVSS 8.2)
• CVE-2026-66629 — WordPress Kirki plugin <= 6.2.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-65436 — WordPress Kirki plugin <= 6.0.13 - Arbitrary File Deletion vulnerability (CVSS 6.8)
• CVE-2026-57727 — WordPress Kirki plugin <= 6.2.0 - Broken Access Control vulnerability (CVSS 7.5)
• CVE-2026-57726 — WordPress Kirki plugin <= 6.0.12 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2026-57725 — WordPress Kirki plugin <= 6.0.11 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-57724 — WordPress Kirki plugin <= 6.0.12 - PHP Object Injection vulnerability (CVSS 9.8)
• CVE-2026-57680 — WordPress Kirki plugin <= 6.0.11 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5)
• CVE-2026-57627 — WordPress Kirki plugin <= 6.0.11 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.9)