CVE-2026-84221: CWE-89 SQL Injection in Kirki
Description
The Kirki WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allowing users with editor-level access and above to append arbitrary SQL and read the contents of the database, including user credentials.
CVSS v3.1
Score 6.8medium
Affected software
Kirki
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-84221 is a SQL injection vulnerability in the Kirki WordPress plugin versions before 6.3.0. The flaw arises because the plugin does not escape user-supplied identifiers before incorporating them into SQL queries. This allows users with editor-level privileges or above to inject arbitrary SQL, potentially exposing database contents such as user credentials. The vulnerability has a CVSS 3.1 base score of 6.8, indicating a medium severity. No official patch or remediation guidance is currently provided by the vendor, and no known exploits are reported in the wild.
Potential Impact
Exploitation of this vulnerability allows users with editor-level access or higher to perform SQL injection attacks, enabling them to read sensitive data from the database, including user credentials. This compromises the confidentiality of the database contents but does not affect integrity or availability according to the CVSS vector.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict editor-level access to trusted users only and monitor for suspicious activity related to database access.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- WPScan
- Date Reserved
- 2026-09-01T11:50:23.724Z
- State
- PUBLISHED
Threat ID: 6a9bb8b7acd9273b49723b7f
Added to database: 09/05/2026, 06:37:43 UTC
Last enriched: 09/07/2026, 11:14:27 UTC
Last updated: 10/20/2026, 18:48:24 UTC
Views: 73
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.