Known vulnerabilities in Kirby - page 2
Vendor:
Ian Stewart
Software:
Kirby
Software CPE:
cpe:2.3:a:iandstewart:kirby:*:*:*:*:*:wordpress:*:*
Total vulnerabilities:
54
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.5.3
5.5.2
4.9.5
5.5.1
5.5.0
5.4.4
4.9.4
5.4.3
4.9.3
5.4.2
4.9.2
5.4.1
4.9.1
2.5.14
2.5.13
2.5.12
2.5.11
2.5.10
2.5.9
2.5.8
2.5.7
2.5.6
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0
5.4.0
4.9.0
5.3.3
5.3.2
5.3.1
5.3.0
5.2.3
5.2.2
5.2.1
5.2.0
5.1.4
5.1.3
5.1.2
5.1.1
5.1.0
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.8.0
4.7.2
4.7.1
3.10.1.2
3.9.8.3
4.7.0
4.6.1
4.6.0
4.5.0
4.4.1
4.4.0
4.3.1
3.10.1.1
3.9.8.2
3.8.4.4
3.7.5.5
3.6.6.6
3.10.1
4.3.0
4.2.0
4.1.2
4.1.1
3.10.0.1
3.9.8.1
3.8.4.3
3.7.5.4
3.6.6.5
4.1.0
4.0.3
4.0.2
3.10.0
4.0.1
4.0.0
3.9.8
3.9.7
3.8.4.2
3.7.5.3
3.6.6.4
3.5.8.4
3.9.6.1
3.9.6
3.8.4.1
3.7.5.2
3.6.6.3
3.5.8.3
3.9.5
3.9.4
3.9.3
3.9.2
3.9.1
3.9.0
3.8.4
3.8.3
3.8.2
3.8.1.1
3.8.1
3.7.5.1
3.6.6.2
3.5.8.2
3.8.0
3.7.5
3.5.8.1
3.7.4
3.6.6.1
3.7.3
3.7.2.1
3.7.2
3.7.1
3.7.0.2
3.7.0.1
3.7.0
3.6.6
3.6.5
3.6.4
3.6.3.1
3.6.3
3.6.2
3.6.1.1
3.6.1
3.6.0
3.5.8
3.5.7.1
3.5.7
3.5.6
3.5.5
3.5.4
3.5.3.1
3.5.3
3.5.2
3.5.1
3.5.0
3.4.5
3.4.4
3.4.3
3.4.2
3.4.1
3.4.0
3.3.6
3.3.5
3.3.4
3.3.3
3.3.2
3.3.1
3.3.0
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.3
3.0.2
3.0.1
3.0.0
0.3.2
0.3.1
0.3
0.2
0.1
Vulnerabilities (54)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU127196 - Improper Neutralization of Special Elements Used in a Template Engine CVE-2026-34587 |
CWE-1336 | Medium | 4.9.0, 5.4.0 | 23.04.2026 |
SB20260423151 |
||
| #VU127195 - Incorrect Authorization CVE-2026-40099 |
CWE-863 | Low | 4.9.0, 5.4.0 | 23.04.2026 |
SB20260423151 |
||
| #VU127194 - Incorrect Authorization CVE-2026-41325 |
CWE-863 | Low | 4.9.0, 5.4.0 | 23.04.2026 |
SB20260423151 |
||
| #VU127193 - Incorrect Authorization CVE-2026-42137 |
CWE-863 | Low | 4.9.0, 5.4.0 | 23.04.2026 |
SB20260423151 |
||
| #VU127192 - Missing Authorization CVE-2026-42174 |
CWE-862 | Low | 4.9.0, 5.4.0 | 23.04.2026 |
SB20260423151 |
||
| #VU127191 - Relative Path Traversal CVE-2025-30159 |
CWE-23 | Medium | 3.9.8.3, 3.10.1.2, 4.7.1 | 23.04.2026 |
SB20260423150 |
||
| #VU127190 - Relative Path Traversal CVE-2025-30207 |
CWE-23 | Low | 3.9.8.3, 3.10.1.2, 4.7.1 | 23.04.2026 |
SB20260423150 |
||
| #VU127189 - Relative Path Traversal CVE-2025-31493 |
CWE-23 | Medium | 3.9.8.3, 3.10.1.2, 4.7.1 | 23.04.2026 |
SB20260423150 |
||
| #VU121188 - Permissions, Privileges, and Access Controls CVE-2026-21896 |
CWE-264 | Medium | 5.2.2 | 13.01.2026 |
SB2026011327 |
||
| #VU118587 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-65012 |
CWE-79 | Low | 5.1.4 | 18.11.2025 |
SB2025111846 |
||
| #VU96614 - Incorrect Authorization CVE-2024-41964 |
CWE-863 | Medium | 3.6.6.6, 3.7.5.5, 3.8.4.4, 3.9.8.2, 3.10.1.1, 4.3.1 | 29.08.2024 |
SB2024082920 |
||
| #VU86806 - Unrestricted Upload of File with Dangerous Type CVE-2024-26483 |
CWE-434 | Medium | 3.6.6.5, 3.7.5.4, 3.8.4.3, 3.9.8.1, 3.10.0.1, 4.1.1 | 26.02.2024 |
SB2024022647 |
||
| #VU86805 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-27087 |
CWE-79 | Low | 4.1.1 | 26.02.2024 |
SB2024022647 |
||
| #VU86804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-26481 |
CWE-79 | Low | 3.6.6.5, 3.7.5.4, 3.8.4.3, 3.9.8.1, 3.10.0.1, 4.1.1 | 26.02.2024 |
SB2024022647 |
||
| #VU78722 - Improper Neutralization of Delimiters CVE-2023-38488 |
CWE-140 | Medium | 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, 3.9.6 | 27.07.2023 |
SB2023072731 |
||
| #VU78720 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-38490 |
CWE-611 | Medium | 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, 3.9.6 | 27.07.2023 |
SB2023072731 |
||
| #VU78719 - Allocation of Resources Without Limits or Throttling CVE-2023-38492 |
CWE-770 | Medium | 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, 3.9.6 | 27.07.2023 |
SB2023072731 |
||
| #VU78718 - Insufficient Session Expiration CVE-2023-38489 |
CWE-613 | Medium | 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, 3.9.6 | 27.07.2023 |
SB2023072731 |
||
| #VU78717 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-38491 |
CWE-79 | Low | 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, 3.9.6 | 27.07.2023 |
SB2023072731 |
||
| #VU127187 - Observable Response Discrepancy CVE-2022-39315 |
CWE-204 | Medium | 3.5.8.2, 3.6.6.2, 3.7.5.1, 3.8.1 | 18.10.2022 |
SB2022101845 |
Showing elements 21 - 40 out of 54