Aller au contenu

Vulnérabilités connues pour Themeum Kirki

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-112348 Kirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing Token 6.9 Moyenne 30 oct. 2026
CVE-2026-112347 Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST… 7.2 Élevée 30 oct. 2026
CVE-2026-42694 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki… 4.3 Moyenne 29 oct. 2026
CVE-2026-103065 Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality… 8.2 Élevée 3 oct. 2026
CVE-2026-66629 Unauthenticated Cross Site Scripting (XSS) in Kirki <= 6.2.3 versions 7.1 Élevée 18 août 2026
CVE-2026-65436 Editor Arbitrary File Deletion in Kirki <= 6.0.13 versions 6.8 Moyenne 27 juil. 2026
CVE-2026-57724 Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injection.This issue affects Kirki:… 9.8 Critique 13 juil. 2026
CVE-2026-57725 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Kirki… 7.1 Élevée 13 juil. 2026
CVE-2026-57726 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Kirki… 9.3 Critique 13 juil. 2026
CVE-2026-57727 Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control… 7.5 Élevée 13 juil. 2026
CVE-2026-57680 Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions 6.5 Moyenne 2 juil. 2026
CVE-2026-57627 Subscriber Server Side Request Forgery (SSRF) in Kirki <= 6.0.11 versions 4.9 Moyenne 26 juin 2026

Autres produits Themeum