Themeum Kirki vulnerabilities
9 vulnerabilities
Known vulnerabilities in Themeum Kirki, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-65436themeumkirki
EPSS score0.50%
Editor Arbitrary File Deletion in Kirki <= 6.0.13 versions.CVE-2026-103065themeumkirki+1EPSS score0.21%
Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1.CVE-2026-66629themeumkirki+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in Kirki <= 6.2.3 versions.CVE-2026-57680themeumkirki+1EPSS score0.33%
Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions.CVE-2026-57724themeumkirki+1EPSS score0.56%
Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injection.This issue affects Kirki: from n/a through <= 6.0.12.CVE-2026-57627themeumkirki+1EPSS score0.19%
Subscriber Server Side Request Forgery (SSRF) in Kirki <= 6.0.11 versions.CVE-2026-57725themeumkirki+1EPSS score0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Kirki kirki allows Stored XSS.This issue affects Kirki: from n/a through <= 6.0.11.CVE-2026-57726themeumkirki+1EPSS score0.40%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Kirki kirki allows Blind SQL Injection.This issue affects Kirki: from n/a through <= 6.0.12.CVE-2026-57727themeumkirki+1EPSS score0.39%
Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kirki: from n/a through 6.2.0.