Unknown Kirki vulnerabilities
15 published CVEs name Unknown Kirki among the affected products.
- 15Published CVEs15 of them scored
- 15Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-84224
Kirki < 6.3.2 - Editor+ Blind SSRF via Remote Template URL
Unknown · Kirki
Medium4.1 - CVE-2026-84220
Kirki < 6.3.2 - Unauthenticated Arbitrary Shortcode Execution via Comments Collection
Unknown · Kirki
Medium4.8 - CVE-2026-84223
Kirki 6.0.0 - 6.3.0 - Author+ Stored XSS via Unsanitized SVG Upload
Unknown · Kirki
Medium6.8 - CVE-2026-84222
Kirki 6.2.1 - 6.2.5 - Unauthenticated Non-Public Post Content Disclosure via 'kirki_data' Parameter
Unknown · Kirki
Medium5.3 - CVE-2026-84219
Kirki 6.2.1 - 6.2.5 - Unauthenticated Stored XSS via HTML Entity Decoding
Unknown · Kirki
High7.5 - CVE-2026-84225
Kirki 6.0.0 - 6.2.5 - Authenticated Collaboration Comment Status Modification via IDOR
Unknown · Kirki
Low2.2 - CVE-2026-84221
Kirki 6.0.0 - 6.2.5 - Editor+ SQLi via Content Manager Field ID
Unknown · Kirki
Medium6.8 - CVE-2026-77754
Kirki < 6.0.14 - Unauthenticated User and Comment Author Email Disclosure via kirki_get_apis
Unknown · Kirki
Medium5.3 - CVE-2026-74992
Kirki < 6.2.3 - Editor+ Stored XSS via Font Zip Upload
Unknown · Kirki
Medium6.8 - CVE-2026-16747
Kirki < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions
Unknown · Kirki
Medium6.5