CVE-2026-102173 | themeum Kirki Plugin up to 6.3.1 on WordPress Image Element image_element cross site scripting

October 7, 2026 Yanac

A vulnerability labeled as problematic has been found in themeum Kirki Plugin up to 6.3.1 on WordPress. This affects the function ExceptionalElements::image_element of the component Image Element. The manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-102173. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More