CVE-2026-75891 | meum Kirki Plugin up to 6.2.5 on WordPress AJAX Dispatcher kirki_post_apis privileges management

October 27, 2026 Yanac

A vulnerability was found in meum Kirki Plugin up to 6.2.5 on WordPress. It has been classified as critical. Impacted is the function kirki_post_apis of the component AJAX Dispatcher. Performing a manipulation results in improper privilege management.

This vulnerability is reported as CVE-2026-75891. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More