Unknown Kirki

• CVE-2026-84224 Medium 4.1 Kirki < 6.3.2 - Editor+ Blind SSRF via Remote Template URL 0.2%
• CVE-2026-84220 Medium 4.8 Kirki < 6.3.2 - Unauthenticated Arbitrary Shortcode Execution via Comments Collection 0.1%
• CVE-2026-84223 Medium 6.8 Kirki 6.0.0 - 6.3.0 - Author+ Stored XSS via Unsanitized SVG Upload 0.4%
• CVE-2026-84222 Medium 5.3 Kirki 6.2.1 - 6.2.5 - Unauthenticated Non-Public Post Content Disclosure via 'kirki_data' Parameter 0.3%
• CVE-2026-84219 High 7.5 Kirki 6.2.1 - 6.2.5 - Unauthenticated Stored XSS via HTML Entity Decoding 0.4%
• CVE-2026-84225 Low 2.2 Kirki 6.0.0 - 6.2.5 - Authenticated Collaboration Comment Status Modification via IDOR 0.2%
• CVE-2026-84221 Medium 6.8 Kirki 6.0.0 - 6.2.5 - Editor+ SQLi via Content Manager Field ID 0.4%
• CVE-2026-77754 Medium 5.3 Kirki < 6.0.14 - Unauthenticated User and Comment Author Email Disclosure via kirki_get_apis 0.3%
• CVE-2026-74992 Medium 6.8 Kirki < 6.2.3 - Editor+ Stored XSS via Font Zip Upload 0.4%
• CVE-2026-16747 Medium 6.5 Kirki < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions 0.4%
• CVE-2026-12721 High 8.6 Kirki < 6.0.13 - Unauthenticated SQL Injection 0.4%
• CVE-2026-12720 High 7.5 Kirki < 6.0.13 - Unauthenticated PHP Object Injection 0.5%
• CVE-2026-13147 Critical 9.1 Kirki < 6.0.12 - Unauthenticated Server-Side Request Forgery via kirki_get_apis 1.5%
• CVE-2026-12724 Medium 4.3 Kirki < 6.0.12 - Unauthenticated HTML Injection in Password Reset Email via kirki-forgot-password 0.1%
• CVE-2026-12723 Medium 5.3 Kirki < 6.0.12 - Unauthenticated Arbitrary Comment Modification and Moderation Bypass via Component Library 0.3%