Unrated severityNVD Advisory· Published Sep 9, 2026

CVE-2026-84222

Description

The Kirki WordPress plugin before 6.3.0 does not check whether the requester is allowed to read a post before rendering and returning its page content, allowing unauthenticated users to retrieve the content of pages that are not publicly available, such as private, draft, pending and trashed ones.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Kirkillm-fuzzy
Range: <6.3.0
Package: https://wordpress.org/plugins/kirki

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/56ba6cf9-79c5-40ce-acfc-7616769ac8cf/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000