Kirki <= 6.0.11 Unauthenticated Sensitive Information Exposure via AJAX (CVE-2026-12122)

www.wordfence.com 2026-07-03查看中文 →

Security AdvisoryCVE-2026-12122MediumKirki

Affected:

Kirki <= 6.0.11

Fixed in:

6.0.12

Referenced CVEs: CVE-2026-12122 · 5.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

WooCommerce PDF Invoices & Packing Slips <=5.14.0 IDOR Sensitive Information Disclosure CVE-2026-13116 2026-07-12 Swiss Toolkit For WP <= 1.4.6 Authenticated Arbitrary File Upload to RCE (CVE-2026-2354) 2026-07-12 WordPress Members Plugin Unauth Sensitive Info Disclosure via REST API Pagination (CVE-2026-12426) 2026-07-12 Wordpress Plugin Starboard Suite <=3.1.4 Authenticated Stored XSS Advisory (CVE-2025-13968) 2026-07-11 WordPress AIWU Plugin Unauth. Arbitrary Mod & Missing Auth (CVE-2026-6804) 2026-07-11

Offline Archive

Offline screenshot & PDF are Pro-exclusive