CyberRota
← Ana sayfaya dön

CVE-2026-12723

MEDIUM · CVSS 5.3 EPSS %0.14

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-20T07:16:34.877 · Çekilme zamanı: 2026-07-21T06:06:22.965059+00:00

CyberRota Yorumu

Saldırganın giriş yapmış olması gerekebilir.

CVE
CVE-2026-12723
Severity
MEDIUM
CVSS
5.3
EPSS
%0.14
WordPress

Orijinal NVD Açıklaması

The Kirki WordPress plugin before 6.0.12 does not perform any authorisation check on one of its REST routes, allowing unauthenticated users to overwrite the content of arbitrary existing comments and to create pre-approved comments under a spoofed identity, bypassing comment moderation.