CVE-2026-84223 | Kirki Plugin up to 6.3.0 on WordPress SVG file cross site scripting

September 20, 2026 Yanac

A vulnerability was found in Kirki Plugin up to 6.3.0 on WordPress. It has been classified as problematic. The affected element is an unknown function of the component SVG file Handler. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2026-84223. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More