Skip to content

Known vulnerabilities in Themeum Kirki – Freeform Page Builder, Website Builder & Customizer

Is your version affected?

CVE Summary Score Published
CVE-2026-75891 The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and… 8.8 High Oct 27, 2026
CVE-2026-104734 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to PHP Object… 7.2 High Oct 17, 2026
CVE-2026-107762 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct… 7.5 High Oct 17, 2026
CVE-2026-14572 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored… 6.4 Medium Oct 15, 2026
CVE-2026-102291 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary… 5.4 Medium Oct 10, 2026
CVE-2026-102173 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored… 7.2 High Oct 7, 2026
CVE-2026-18335 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Blind… 5.4 Medium Sep 24, 2026
CVE-2026-17037 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored… 7.2 High Sep 11, 2026
CVE-2026-17604 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory… 4.9 Medium Aug 16, 2026
CVE-2026-18347 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization… 4.3 Medium Aug 16, 2026
CVE-2026-16974 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored… 6.4 Medium Aug 11, 2026
CVE-2026-15601 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Path Traversal… 4.9 Medium Aug 1, 2026
CVE-2026-13464 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct… 5.3 Medium Jul 24, 2026
CVE-2026-15457 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory… 4.9 Medium Jul 17, 2026
CVE-2026-12472 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization… 5.3 Medium Jul 2, 2026
CVE-2026-12122 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Sensitive… 5.3 Medium Jul 2, 2026
CVE-2026-8206 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege… 9.8 Critical Jun 2, 2026
CVE-2026-8073 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file… 7.5 High May 19, 2026
CVE-2026-8096 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization… 6.5 Medium May 19, 2026

Other Themeum products