CVE-2026-57627

WordPress Kirki plugin <= 6.0.11 - Server Side Request Forgery (SSRF) vulnerability PUBLISHED

Description (CNA)

Subscriber Server Side Request Forgery (SSRF) in Kirki <= 6.0.11 versions.

Vendor / product	Versions
Themeum / Kirki	affected n/a through 6.0.11

CWE-918

CISA-ADP

No English description supplied.

No references supplied.