Threats tagged 'ghsa-78r9-6m52-hhpv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.8	EPSS 0.4%	CVE-2026-84221Kirki (WordPress plugin) · SQL Injection Medium6.8EPSS 0.4%2026-09-05CVE Database V5CVE-2026-84221 The Kirki WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allowing users with editor-level access and above to append arbitrary SQL and read the contents of the database, including user credentials. EPSS 0.4%Vulnerability CWE-89 #ghsa-78r9-6m52-hhpv	CVE Database V5	2026-09-05

Page 1 of 1