Known vulnerabilities in Themeum Kirki
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-112348 | Kirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing Token | 6.9 Medium | Oct 30, 2026 |
| CVE-2026-112347 | Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST… | 7.2 High | Oct 30, 2026 |
| CVE-2026-42694 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki… | 4.3 Medium | Oct 29, 2026 |
| CVE-2026-103065 | Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality… | 8.2 High | Oct 3, 2026 |
| CVE-2026-66629 | Unauthenticated Cross Site Scripting (XSS) in Kirki <= 6.2.3 versions | 7.1 High | Aug 18, 2026 |
| CVE-2026-65436 | Editor Arbitrary File Deletion in Kirki <= 6.0.13 versions | 6.8 Medium | Jul 27, 2026 |
| CVE-2026-57724 | Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injection.This issue affects Kirki:… | 9.8 Critical | Jul 13, 2026 |
| CVE-2026-57725 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Kirki… | 7.1 High | Jul 13, 2026 |
| CVE-2026-57726 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Kirki… | 9.3 Critical | Jul 13, 2026 |
| CVE-2026-57727 | Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control… | 7.5 High | Jul 13, 2026 |
| CVE-2026-57680 | Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions | 6.5 Medium | Jul 2, 2026 |
| CVE-2026-57627 | Subscriber Server Side Request Forgery (SSRF) in Kirki <= 6.0.11 versions | 4.9 Medium | Jun 26, 2026 |
Other Themeum products
Tutor LMS – eLearning and online course solution 47
Tutor LMS 22
Kirki – Freeform Page Builder, Website Builder & Customizer 19
WP Crowdfunding 14
tutor_lms 12
Tutor LMS Pro 9
Tutor LMS Elementor Addons 6
Qubely 5
Qubely – Advanced Gutenberg Blocks 3
Droip 2
Tutor LMS – Migration Tool 2
WP Mega Menu 2