A vulnerability was found in Kirki Plugin up to 6.0.11 on WordPress. It has been declared as critical. This impacts an unknown function. Executing a manipulation can lead to server-side request forgery.
The identification of this vulnerability is CVE-2026-13147. The attack may be launched remotely. There is no exploit available.
