2026年9月6日

CVE-2026-84221 – The Kirki WordPress plugin before 6.3.0 does not escape a user-supplied identifier before

未分类

📑 文章目录

The Kirki WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allowing users with editor-level access and above to append arbitrary SQL and read the contents of the database, including user credentials.

相关文章