<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: themeum-kirki</title><description>Every new CVE for themeum-kirki.</description><link>https://agentprime.io/</link><item><title>CVE-2026-112348: Kirki WordPress Plugin &lt; 6.2.5 reCAPTCHA Bypass via Missing Token</title><link>https://agentprime.io/advisories/CVE-2026-112348/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-112348/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 14:01:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-112347: Kirki WordPress Plugin &lt; 6.4.1 Broken Object-Level Access Control via Page API</title><link>https://agentprime.io/advisories/CVE-2026-112347/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-112347/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 13:58:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42694: WordPress Kirki plugin &lt;= 6.4.0 - Content Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-42694/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42694/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:05:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103065: WordPress Kirki plugin &lt;= 6.3.1 - Arbitrary Code Execution vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-103065/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103065/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 03 Oct 2026 14:00:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-66629: WordPress Kirki plugin &lt;= 6.2.3 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-66629/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-66629/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Aug 2026 13:59:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-65436: WordPress Kirki plugin &lt;= 6.0.13 - Arbitrary File Deletion vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-65436/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65436/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Jul 2026 13:59:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57724: WordPress Kirki plugin &lt;= 6.0.12 - PHP Object Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-57724/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57724/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 13 Jul 2026 08:41:24 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-57725: WordPress Kirki plugin &lt;= 6.0.11 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-57725/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57725/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 13 Jul 2026 08:41:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57726: WordPress Kirki plugin &lt;= 6.0.12 - SQL Injection vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-57726/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57726/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 13 Jul 2026 08:41:24 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-57727: WordPress Kirki plugin &lt;= 6.2.0 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-57727/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57727/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 13 Jul 2026 08:41:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57680: WordPress Kirki plugin &lt;= 6.0.11 - Insecure Direct Object References (IDOR) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-57680/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57680/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jul 2026 11:15:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57627: WordPress Kirki plugin &lt;= 6.0.11 - Server Side Request Forgery (SSRF) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-57627/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57627/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Jun 2026 14:53:07 GMT</pubDate><category>CVE</category></item></channel></rss>