[■] Plugin de WordPress

Kirki – Freeform Page Builder, Website Builder & Customizer

45 expedientes en el radar

Comprueba tu versión de Kirki – Freeform Page Builder, Website Builder & Customizer Sólo las que se están explotando

[■] Registro

Vulnerabilidades (45)

5,3 Media

CVE-2026-112348: vulnerabilidad en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-112348

T−15d 30 oct. 2026
2,7 Baja

CVE-2026-112347: falta de autorización en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-112347

T−15d 30 oct. 2026
3,5 Baja

CVE-2026-42694: falta de autorización en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-42694

T−16d 29 oct. 2026
8,8 Alta

CVE-2026-75891: deserialización de datos no fiables en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-75891

T−19d 26 oct. 2026
7,5 Alta

CVE-2026-107762: acceso a datos de otros usuarios (IDOR) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-107762

T−29d 16 oct. 2026
7,2 Alta

CVE-2026-104734: deserialización de datos no fiables en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-104734

T−29d 16 oct. 2026
6,4 Media

CVE-2026-14572: cross-site scripting (XSS) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-14572

T−31d 14 oct. 2026
5,4 Media

CVE-2026-102291: inyección en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-102291

T−36d 9 oct. 2026
6,5 Media

CVE-2026-84220: inyección de código en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-84220

T−36d 9 oct. 2026
5,5 Media

CVE-2026-84224: falsificación de peticiones del servidor (SSRF) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-84224

T−36d 9 oct. 2026
7,2 Alta

CVE-2026-102173: cross-site scripting (XSS) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-102173

T−39d 6 oct. 2026
9,8 Crít.

CVE-2026-103065: inyección de código en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-103065

T−44d 1 oct. 2026
5,4 Media

CVE-2026-18335: falsificación de peticiones del servidor (SSRF) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-18335

T−52d 23 sept. 2026
6,4 Media

CVE-2026-84223: cross-site scripting (XSS) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-84223

T−57d 18 sept. 2026
7,2 Alta

CVE-2026-17037: cross-site scripting (XSS) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-17037

T−65d 10 sept. 2026
5,3 Media

CVE-2026-84222: exposición de información sensible en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-84222

T−66d 9 sept. 2026
7,2 Alta

CVE-2026-84219: cross-site scripting (XSS) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-84219

T−67d 8 sept. 2026
4,9 Media

CVE-2026-84221: inyección SQL en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-84221

T−70d 5 sept. 2026
4,3 Media

CVE-2026-84225: acceso a datos de otros usuarios (IDOR) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-84225

T−70d 5 sept. 2026
5,3 Media

CVE-2026-77754: falta de autorización en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-77754

T−80d 26 ago. 2026
9,8 Crít.

CVE-2026-16747: inyección de código en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-16747

T−82d 24 ago. 2026
4,4 Media

CVE-2026-74992: cross-site scripting (XSS) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-74992

T−85d 21 ago. 2026
7,2 Alta

CVE-2026-66629: cross-site scripting (XSS) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-66629

T−88d 18 ago. 2026
4,3 Media

CVE-2026-18347: falta de autorización en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-18347

T−91d 15 ago. 2026
4,9 Media

CVE-2026-17604: recorrido de rutas (path traversal) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-17604

T−91d 15 ago. 2026
6,4 Media

CVE-2026-16974: cross-site scripting (XSS) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-16974

T−96d 10 ago. 2026
8,1 Alta

CVE-2026-12720: deserialización de datos no fiables en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-12720

T−102d 4 ago. 2026
4,9 Media

CVE-2026-15601: recorrido de rutas (path traversal) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-15601

T−106d 31 jul. 2026
5,3 Media

CVE-2026-13464: acceso a datos de otros usuarios (IDOR) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-13464

T−114d 23 jul. 2026
4,9 Media

CVE-2026-15457: recorrido de rutas (path traversal) en Kirki – Freeform Page Builder, Website Builder & Customizer

CVE-2026-15457

T−121d 16 jul. 2026