CVE-2026-17037 | themeum Kirki Plugin up to 6.2.0 on WordPress Comment cross site scripting

September 11, 2026 Yanac

A vulnerability, which was classified as problematic, was found in themeum Kirki Plugin up to 6.2.0 on WordPress. Affected is an unknown function. The manipulation of the argument Comment results in cross site scripting.

This vulnerability is known as CVE-2026-17037. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More