CyberRota
← Ana sayfaya dön

CVE-2026-12122

MEDIUM · CVSS 5.3 EPSS %0.50

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-02T10:16:27.410 · Çekilme zamanı: 2026-07-02T18:27:52.657895+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-12122
Severity
MEDIUM
CVSS
5.3
EPSS
%0.50
WordPress

Orijinal NVD Açıklaması

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.11 via the get_single_symbol. This makes it possible for unauthenticated attackers to extract the full builder metadata and rendered HTML of any kirki_symbol post — including unpublished drafts — by supplying a sequential WordPress post ID.