[Critical] CVE-2026-8206 – The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordP...
Critical CVE-2026-8206 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions 6.0.0 to 6.0.6. This is due to the plugin accepting an arbitrary email address when a username is used in the...