Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-8206

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-8206.

Coverage Span: 2026-06-02
Reports: 1 related reports

Associated Reports & Timeline

CVE-2026-8206 — Themeum Kirki WordPress Plugin Password Reset Email Redirect Privilege Escalation

CVE-2026-8206: Kirki 6.0.0–6.0.6 sends WordPress password-reset links to an attacker-supplied email, enabling unauthenticated takeover of any account including admin; fixed in 6.0.7.