CVE-2026-57726criticalCWE-89

CVE-2026-57726: falha crítica em Themeum Kirki

WordPress Kirki plugin <= 6.0.12 - SQL Injection vulnerability

Publicada em

Seguir esta CVE+ Monitorar Kirki

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.4%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Kirki kirki allows Blind SQL Injection.This issue affects Kirki: from n/a through <= 6.0.12.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Produtos afetados
Themeum · Kirki
CVEs relacionadas — Themeum Kirki

No mesmo produto, das mais perigosas para as menos.

CVE-2026-57724CRITICALWordPress Kirki plugin <= 6.0.12 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2026-65436MEDIUMWordPress Kirki plugin <= 6.0.13 - Arbitrary File Deletion vulnerabilityEPSS 0.5%CVE-2026-57727HIGHWordPress Kirki plugin <= 6.2.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-57680MEDIUMWordPress Kirki plugin <= 6.0.11 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-112348MEDIUMKirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing TokenEPSS 0.3%CVE-2026-112347HIGHKirki WordPress Plugin < 6.4.1 Broken Object-Level Access Control via Page APIEPSS 0.3%