CVE Database /
CVE-2026-57726
CVE · Critical
CVE-2026-57726 — Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.13
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-57726
|
Kirki – Freeform Page Builder, Website Builder & Customizer [kirki] < 6.0.13 |
— |
Critical
9.3
|
< 6.0.13
|
6.0.13 |
2026-07-06 |
—
|
CVE-2026-57726
The Kirki plugin, versions 6.0.12 and earlier, is susceptible to SQL Injection because it inadequately escapes user-supplied parameters in SQL queries. This vulnerability allows unauthenticated attackers to inject additional SQL commands, potentially leading to the exposure of sensitive data from the database.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings