CVE Database /
CVE-2026-57725
CVE · High
CVE-2026-57725 — Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.12
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-57725
|
Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.12 |
— |
High
7.1
|
< 6.0.12
|
6.0.12 |
2026-07-06 |
—
|
CVE-2026-57725
The Kirki plugin, used for WordPress website building and customization, has a stored cross-site scripting vulnerability up to version 6.0.11. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject malicious scripts that can be executed when users view affected pages.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings