Approved changes feed: RSS · Atom
cpe:2.3:a:themeum:kirki:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Themeum (12449a9f-b8a3-5f81-9e39-f958a6d45415) |
|---|---|
| Product | Kirki (e170396a-a860-590c-9bf4-a470c993144f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57727 |
vulnerable | 2026-07-29 01:03:16.113701 |
WordPress Kirki plugin <= 6.0.13 - Broken Access Control vulnerability
HIGH (7.5)
Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kirki: from n/a through <= 6.0.13.
Published: 2026-07-13T08:41:24.850Z
Updated: 2026-07-13T13:52:36.875Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57726 |
vulnerable | 2026-07-29 01:03:16.113529 |
WordPress Kirki plugin <= 6.0.12 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Kirki kirki allows Blind SQL Injection.This issue affects Kirki: from n/a through <= 6.0.12.
Published: 2026-07-13T08:41:24.853Z
Updated: 2026-07-13T13:30:34.515Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57725 |
vulnerable | 2026-07-29 01:03:16.113272 |
WordPress Kirki plugin <= 6.0.11 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Kirki kirki allows Stored XSS.This issue affects Kirki: from n/a through <= 6.0.11.
Published: 2026-07-13T08:41:24.863Z
Updated: 2026-07-13T14:38:41.795Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57724 |
vulnerable | 2026-07-29 01:03:16.113078 |
WordPress Kirki plugin <= 6.0.12 - PHP Object Injection vulnerability
CRITICAL (9.8)
Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injection.This issue affects Kirki: from n/a through <= 6.0.12.
Published: 2026-07-13T08:41:24.871Z
Updated: 2026-07-13T13:38:35.873Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57680 |
vulnerable | 2026-07-29 01:03:15.951195 |
WordPress Kirki plugin <= 6.0.11 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (6.5)
Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions.
Published: 2026-07-02T11:15:36.880Z
Updated: 2026-07-02T13:46:34.079Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57627 |
vulnerable | 2026-07-29 01:03:15.739762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.