Skip to main content
VulnerabilityPublished

Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs

Source SecurityWeek

0

Mentioned vulnerabilities

Severity
Medium

Rated by Threat Radar

Data as of 3 Jun 2026, 22:55 UTC

What to do

AI-suggested

Official patches addressing these vulnerabilities have been released. Users should immediately update Kirki to version 6.0.7 or later and Burst Statistics to version 3.4.2 or later to remediate the security flaws. Applying these updates will prevent exploitation of the privilege escalation and authentication bypass issues. No additional mitigation steps are required beyond applying the vendor-provided fixes.

Description

Threat actors are exploiting vulnerable Kirki and Burst Statistics deployments to elevate privileges and take over websites. The post Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs appeared first on SecurityWeek .

References

Community reviews

Loading reviews…