<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: kirki</title><description>Every new CVE for kirki.</description><link>https://agentprime.io/</link><item><title>CVE-2026-84224: Kirki &lt; 6.3.2 - Editor+ Blind SSRF via Remote Template URL</title><link>https://agentprime.io/advisories/CVE-2026-84224/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84224/</guid><description>CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Oct 2026 08:06:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84220: Kirki &lt; 6.3.2 - Unauthenticated Arbitrary Shortcode Execution via Comments Collection</title><link>https://agentprime.io/advisories/CVE-2026-84220/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84220/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Oct 2026 08:06:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84223: Kirki 6.0.0 - 6.3.0 - Author+ Stored XSS via Unsanitized SVG Upload</title><link>https://agentprime.io/advisories/CVE-2026-84223/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84223/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 20 Sep 2026 06:00:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84222: Kirki 6.2.1 - 6.2.5 - Unauthenticated Non-Public Post Content Disclosure via &apos;kirki_data&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-84222/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84222/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 06:00:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84219: Kirki 6.2.1 - 6.2.5 - Unauthenticated Stored XSS via HTML Entity Decoding</title><link>https://agentprime.io/advisories/CVE-2026-84219/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84219/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 06 Sep 2026 06:00:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84225: Kirki 6.0.0 - 6.2.5 - Authenticated Collaboration Comment Status Modification via IDOR</title><link>https://agentprime.io/advisories/CVE-2026-84225/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84225/</guid><description>CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 05 Sep 2026 06:00:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84221: Kirki 6.0.0 - 6.2.5 - Editor+ SQLi via Content Manager Field ID</title><link>https://agentprime.io/advisories/CVE-2026-84221/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84221/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 05 Sep 2026 06:00:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-77754: Kirki &lt; 6.0.14 - Unauthenticated User and Comment Author Email Disclosure via kirki_get_apis</title><link>https://agentprime.io/advisories/CVE-2026-77754/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-77754/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Aug 2026 06:00:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-74992: Kirki &lt; 6.2.3 - Editor+ Stored XSS via Font Zip Upload</title><link>https://agentprime.io/advisories/CVE-2026-74992/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-74992/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 06:00:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16747: Kirki &lt; 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions</title><link>https://agentprime.io/advisories/CVE-2026-16747/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16747/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 11:24:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12721: Kirki &lt; 6.0.13 - Unauthenticated SQL Injection</title><link>https://agentprime.io/advisories/CVE-2026-12721/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12721/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 31 Jul 2026 06:00:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12720: Kirki &lt; 6.0.13 - Unauthenticated PHP Object Injection</title><link>https://agentprime.io/advisories/CVE-2026-12720/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12720/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 31 Jul 2026 06:00:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13147: Kirki &lt; 6.0.12 - Unauthenticated Server-Side Request Forgery via kirki_get_apis</title><link>https://agentprime.io/advisories/CVE-2026-13147/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13147/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Jul 2026 06:00:04 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-12724: Kirki &lt; 6.0.12 - Unauthenticated HTML Injection in Password Reset Email via kirki-forgot-password</title><link>https://agentprime.io/advisories/CVE-2026-12724/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12724/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Jul 2026 06:00:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12723: Kirki &lt; 6.0.12 - Unauthenticated Arbitrary Comment Modification and Moderation Bypass via Component Library</title><link>https://agentprime.io/advisories/CVE-2026-12723/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12723/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Jul 2026 06:00:03 GMT</pubDate><category>CVE</category></item></channel></rss>