{"id":"CVE-2026-84221","title":"The Kirki  WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allowing users with editor-level access and above to append arbitrary SQL and read the contents of the database, includin…","summary":"The Kirki  WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allowing users with editor-level access and above to append arbitrary SQL and read the contents of the database, includin…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-89"],"published":"2026-09-05","updated":"2026-09-08","sourceUpdated":"2026-09-08T19:09:21.310","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-84221","references":[{"url":"https://wpscan.com/vulnerability/6c34da62-46fb-4dd4-a433-bd3df4d9fcfd/","label":"contact@wpscan.com"}],"tags":["nvd"],"epss":0.00234,"epssPercentile":0.14629,"ingestedAt":"2026-09-06T05:50:39.579Z","slug":"CVE-2026-84221","body":"## Overview\n\nThe Kirki  WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allowing users with editor-level access and above to append arbitrary SQL and read the contents of the database, including user credentials.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":37.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":8280,"id":"CVE-2026-84221","ts":1788919995802,"field":"cvss","old":null,"new":"6.8"},{"seq":8279,"id":"CVE-2026-84221","ts":1788919995802,"field":"severity","old":"none","new":"medium"},{"seq":8089,"id":"CVE-2026-84221","ts":1788919281169,"field":"cvss","old":"6.8","new":null},{"seq":8088,"id":"CVE-2026-84221","ts":1788919281169,"field":"severity","old":"medium","new":"none"},{"seq":7898,"id":"CVE-2026-84221","ts":1788916356980,"field":"cvss","old":null,"new":"6.8"},{"seq":7897,"id":"CVE-2026-84221","ts":1788916356980,"field":"severity","old":"none","new":"medium"},{"seq":7707,"id":"CVE-2026-84221","ts":1788915298003,"field":"cvss","old":"6.8","new":null},{"seq":7706,"id":"CVE-2026-84221","ts":1788915298003,"field":"severity","old":"medium","new":"none"},{"seq":7516,"id":"CVE-2026-84221","ts":1788912717525,"field":"cvss","old":null,"new":"6.8"},{"seq":7515,"id":"CVE-2026-84221","ts":1788912717525,"field":"severity","old":"none","new":"medium"},{"seq":7325,"id":"CVE-2026-84221","ts":1788911331827,"field":"cvss","old":"6.8","new":null},{"seq":7324,"id":"CVE-2026-84221","ts":1788911331827,"field":"severity","old":"medium","new":"none"},{"seq":7129,"id":"CVE-2026-84221","ts":1788909079148,"field":"cvss","old":null,"new":"6.8"},{"seq":7128,"id":"CVE-2026-84221","ts":1788909079148,"field":"severity","old":"none","new":"medium"},{"seq":6941,"id":"CVE-2026-84221","ts":1788907391894,"field":"cvss","old":"6.8","new":null},{"seq":6940,"id":"CVE-2026-84221","ts":1788907391894,"field":"severity","old":"medium","new":"none"},{"seq":6743,"id":"CVE-2026-84221","ts":1788905445072,"field":"cvss","old":null,"new":"6.8"},{"seq":6742,"id":"CVE-2026-84221","ts":1788905445072,"field":"severity","old":"none","new":"medium"},{"seq":6561,"id":"CVE-2026-84221","ts":1788903460108,"field":"cvss","old":"6.8","new":null},{"seq":6560,"id":"CVE-2026-84221","ts":1788903460108,"field":"severity","old":"medium","new":"none"},{"seq":6347,"id":"CVE-2026-84221","ts":1788901811228,"field":"cvss","old":null,"new":"6.8"},{"seq":6346,"id":"CVE-2026-84221","ts":1788901811228,"field":"severity","old":"none","new":"medium"},{"seq":6177,"id":"CVE-2026-84221","ts":1788899562492,"field":"cvss","old":"6.8","new":null},{"seq":6176,"id":"CVE-2026-84221","ts":1788899562492,"field":"severity","old":"medium","new":"none"},{"seq":6045,"id":"CVE-2026-84221","ts":1788898240535,"field":"cvss","old":null,"new":"6.8"},{"seq":6044,"id":"CVE-2026-84221","ts":1788898240535,"field":"severity","old":"none","new":"medium"}]}