Mmastodon TechnologyCybersecurity first seen 5 d ago, last 5 d ago, peak #4

Kirki WordPress plugin hit by privilege escalation vulnerability

Original: 🚨 EUVD-2026-110629 📊 Score: 8.8/10 (CVSS v3.1) 📦 Product: Kirki – Freeform Page Builder, Website Builder & Customizer 🏢

A high-severity vulnerability, tracked as EUVD-2026-110629 with a CVSS score of 8.8, has been reported in the Kirki plugin for WordPress, developed by Themeum. The flaw allows privilege escalation via PHP object injection and affects all versions up to the disclosure date. Administrators are being urged to update the plugin and review site access.

Why now: The vulnerability affects a widely used WordPress plugin, raising immediate security concerns for site owners and administrators.

KirkiThemeumWordPressEUVD-2026-110629

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 5 d ago to 5 d ago.

Evidence

• 🚨 EUVD-2026-110629 📊 Score: 8.8/10 (CVSS v3.1) 📦 Product: Kirki – Freeform Page Builder, Website Builder & Customizer 🏢 Vendor: Themeum 📅 Updated: 2026-10-27 📝 The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to,… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3842558