CVE-2026-57680
Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions.
Source: CVE.org
CVE · Medium
CVE-2026-57680 — Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.12
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-57680 | Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.12 | Authorization Bypass Through User-Controlled Key | Medium 6.5 | < 6.0.12 | 6.0.12 | 2026-07-02 | — |
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.