CVE-2026-65436

The vulnerability allows for arbitrary file deletion in Kirki versions up to 6.0.13, potentially enabling attackers to remove critical files from the server. This could lead to service disruption or data loss, making it essential for users of affected Kirki versions to prioritize patching. Organizations utilizing Kirki for their web development should assess their exposure and apply updates promptly to mitigate risks.