VulnerabilityPublished
Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs
Source SecurityWeek
0
Mentioned vulnerabilities
Severity
MediumRated by Threat Radar
Data as of 3 Jun 2026, 22:55 UTC
What to do
AI-suggested
Official patches addressing these vulnerabilities have been released. Users should immediately update Kirki to version 6.0.7 or later and Burst Statistics to version 3.4.2 or later to remediate the security flaws. Applying these updates will prevent exploitation of the privilege escalation and authentication bypass issues. No additional mitigation steps are required beyond applying the vendor-provided fixes.
Description
Threat actors are exploiting vulnerable Kirki and Burst Statistics deployments to elevate privileges and take over websites. The post Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs appeared first on SecurityWeek .
References
Community reviews
Loading reviews…