Wordpress

2 posts tagged with “Wordpress”

CVE-2026-16974: Kirki WordPress Plugin Stored XSS in 500,000+ Sites
cvesecurityvulnerability

CVE-2026-16974: Kirki WordPress Plugin Stored XSS in 500,000+ Sites

The Kirki page builder plugin for WordPress, active on over 500,000 sites, contains a stored cross-site scripting vulnerability in its post_meta shortcode. Authenticated users with Contributor access can inject malicious JavaScript into pages. Fixed in version 6.2.1.

Aug 11, 2026
Read
CVE-2026-73033: Sucuri WordPress Security Plugin Path Traversal Allows Arbitrary File Deletion
cvesecurityvulnerability

CVE-2026-73033: Sucuri WordPress Security Plugin Path Traversal Allows Arbitrary File Deletion

Sucuri Security WordPress plugin through 2.7.3 contains a path traversal vulnerability in its file integrity scanner allowing authenticated admins to delete arbitrary files including wp-config.php. 600K active installs.

Aug 11, 2026
Read