A vulnerability described as critical has been identified in Kirki Plugin up to 6.0.12 on WordPress. Affected by this issue is some unknown functionality. Executing a manipulation can lead to sql injection.
This vulnerability is tracked as CVE-2026-12721. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is recommended.
