PULSE
EN VIVO24señales / 24h
EN
FEED
ransomsafepay reclama a wdk.de · DE · Not Foundransomsafepay reclama a jaecklin-industrial.de · DE · Manufacturingransomsafepay reclama a lbb-treuhand.de · DE · Business Servicesransomsafepay reclama a timetex.de · DE · Business Servicesransomsafepay reclama a stroebel-gruppe.de · DE · Manufacturingransomsafepay reclama a industriesjaro.com · CA · Manufacturingransomsafepay reclama a cenesco.de · DE · Not Foundransomsafepay reclama a acsmallmaxwell.com.au · AU · Business Servicesransomsafepay reclama a mende-grundbesitz.de · DE · Business Servicesransomkairos reclama a College O'Sullivan de Québec · CA · Educationransomkairos reclama a Collge O'Sullivan de Québec · CA · Educationransomincransom reclama a Ali-Monde · US · Not Foundransomcoinbasecartel reclama a Caterpillar · US · Manufacturingransomanubis reclama a Bath Fitter · US · Consumer Servicesransomsafepay reclama a wdk.de · DE · Not Foundransomsafepay reclama a jaecklin-industrial.de · DE · Manufacturingransomsafepay reclama a lbb-treuhand.de · DE · Business Servicesransomsafepay reclama a timetex.de · DE · Business Servicesransomsafepay reclama a stroebel-gruppe.de · DE · Manufacturingransomsafepay reclama a industriesjaro.com · CA · Manufacturingransomsafepay reclama a cenesco.de · DE · Not Foundransomsafepay reclama a acsmallmaxwell.com.au · AU · Business Servicesransomsafepay reclama a mende-grundbesitz.de · DE · Business Servicesransomkairos reclama a College O'Sullivan de Québec · CA · Educationransomkairos reclama a Collge O'Sullivan de Québec · CA · Educationransomincransom reclama a Ali-Monde · US · Not Foundransomcoinbasecartel reclama a Caterpillar · US · Manufacturingransomanubis reclama a Bath Fitter · US · Consumer Services
← Todos los CVEs
CVE Watch20 jul 2026

CVE-2026-13147

The Kirki WordPress plugin before 6.0.12 does not validate a user-supplied URL before requesting it server-side, allowing unauthenticated a

CVSS

9.1

Crítico

EPSS

0.1%

p3

KEV

—

Exploit Today

1

0-100

Publicado: 20 jul 2026 · Última mod.: 20 jul 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The Kirki WordPress plugin before 6.0.12 does not validate a user-supplied URL before requesting it server-side, allowing unauthenticated attackers to make the site issue HTTP requests to arbitrary hosts (Server-Side Request Forgery).

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.