Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Kirki Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Published	Severity
`CVE-2026-84222`Kirki 6.2.1 - 6.2.5 - Unauthenticated Non-Public Post Content Disclosure via 'kirki_data' Parameter	Exploitation statusPublic exploit	FixYes	Published09/09/2026	SeverityMedium
`CVE-2026-84219`Kirki 6.2.1 - 6.2.5 - Unauthenticated Stored XSS via HTML Entity Decoding	Exploitation statusPublic exploit	FixYes	Published09/06/2026	SeverityHigh
`CVE-2026-84225`Kirki 6.0.0 - 6.2.5 - Authenticated Collaboration Comment Status Modification via IDOR	Exploitation statusPublic exploit	FixYes	Published09/05/2026	SeverityLow
`CVE-2026-84221`Kirki 6.0.0 - 6.2.5 - Editor+ SQLi via Content Manager Field ID	Exploitation statusPublic exploit	FixYes	Published09/05/2026	SeverityMedium
`CVE-2026-77754`Kirki < 6.0.14 - Unauthenticated User and Comment Author Email Disclosure via kirki_get_apis	Exploitation statusPublic exploit	FixYes	Published08/26/2026	SeverityMedium
`CVE-2026-74992`Kirki < 6.2.3 - Editor+ Stored XSS via Font Zip Upload	Exploitation statusPublic exploit	FixYes	Published08/20/2026	SeverityMedium
`CVE-2026-16747`Kirki < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions	Exploitation statusPublic exploit	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-12721`Kirki < 6.0.13 - Unauthenticated SQL Injection	Exploitation statusPublic exploit	FixYes	Published07/31/2026	SeverityHigh
`CVE-2026-12720`Kirki < 6.0.13 - Unauthenticated PHP Object Injection	Exploitation statusPublic exploit	FixYes	Published07/31/2026	SeverityHigh
`CVE-2026-13147`Kirki < 6.0.12 - Unauthenticated Server-Side Request Forgery via kirki_get_apis	Exploitation statusPublic exploit	FixYes	Published07/20/2026	SeverityCritical
`CVE-2026-12724`Kirki < 6.0.12 - Unauthenticated HTML Injection in Password Reset Email via kirki-forgot-password	Exploitation statusPublic exploit	FixYes	Published07/20/2026	SeverityMedium
`CVE-2026-12723`Kirki < 6.0.12 - Unauthenticated Arbitrary Comment Modification and Moderation Bypass via Component Library	Exploitation statusPublic exploit	FixYes	Published07/20/2026	SeverityMedium

12 / 12 Results

All vulnerabilities loaded

Security vulnerabilities in Kirki

Kirki

Verify to analyze this security profile

How many security vulnerabilities does Kirki have?

Does the latest Kirki version have known vulnerabilities?

Run an in-depth assessment with complete web risk management