CVE-2026-57724 — WordPress Kirki plugin <= 6.0.12 - PHP Object Injection vulnerability

CVE-2026-57724

WordPress Kirki plugin <= 6.0.12 - PHP Object Injection vulnerability PUBLISHED

Description (CNA)

Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injection.This issue affects Kirki: from n/a through <= 6.0.12.

Vendor / product	Versions
Themeum / Kirki	affected 0 through 6.0.12

CWE-502

CISA-ADP

No English description supplied.

No references supplied.