Skip to content

CyberSIXT Search

Vendor

themeum

CVEs tracked · all time: 1
in CISA KEV · all time: 0
articles · since 11 Sep: 0
articles · all time: 2

No articles in the last 45 daysThe latest: SecurityWeek, Wed 3 Jun, 13:21 UTC.See the full timeline

Products: Kirki – Freeform Page Builder, Website Builder & Customizer

CVEs

1 CVE

CVE-2026-8206Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'CVSS9.8Critical–Not in KEV1.3%EPSS2articles

Coverage

2 articles, all timeFull timeline RSS feed

3 JunCritical Kirki plugin flaw lets hackers hijack admin accountsSecurityWeek
2 JunCVE-2026-8206: Kirki flaw lets attackers hijack WordPress adminsSecurityOnline · first in our coverage