Known vulnerabilities in Kirby - page 2

Software: Kirby
Software CPE: cpe:2.3:a:iandstewart:kirby:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 65
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kirby Kirby is affected by 65 known vulnerabilities: 3 high, 21 medium, 41 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132144 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-44174
CWE-470 Medium
No
No
4.9.1, 5.4.1 22.05.2026 SB2026052274
#VU132143 - Missing Authorization
CVE-2026-44176
CWE-862 Low
No
No
4.9.1, 5.4.1 22.05.2026 SB2026052274
#VU132142 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-44177
CWE-98 Medium
No
No
5.4.1 22.05.2026 SB2026052274
#VU132141 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-45368
CWE-79 Low
No
No
4.9.1, 5.4.1 22.05.2026 SB2026052274
#VU127199 - XML Injection
CVE-2026-32870
CWE-91 High
No
No
4.9.0, 5.4.0 23.04.2026 SB20260423151
#VU127198 - Missing Authorization
CVE-2026-42069
CWE-862 Low
No
No
4.9.0, 5.4.0 23.04.2026 SB20260423151
#VU127197 - Missing Authorization
CVE-2026-42051
CWE-862 Low
No
No
4.9.0, 5.4.0 23.04.2026 SB20260423151
#VU127196 - Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-34587
CWE-1336 Medium
No
No
4.9.0, 5.4.0 23.04.2026 SB20260423151
#VU127195 - Incorrect Authorization
CVE-2026-40099
CWE-863 Low
No
No
4.9.0, 5.4.0 23.04.2026 SB20260423151
#VU127194 - Incorrect Authorization
CVE-2026-41325
CWE-863 Low
No
No
4.9.0, 5.4.0 23.04.2026 SB20260423151
#VU127193 - Incorrect Authorization
CVE-2026-42137
CWE-863 Low
No
No
4.9.0, 5.4.0 23.04.2026 SB20260423151
#VU127192 - Missing Authorization
CVE-2026-42174
CWE-862 Low
No
No
4.9.0, 5.4.0 23.04.2026 SB20260423151
#VU127191 - Relative Path Traversal
CVE-2025-30159
CWE-23 Medium
No
No
3.9.8.3, 3.10.1.2, 4.7.1 23.04.2026 SB20260423150
#VU127190 - Relative Path Traversal
CVE-2025-30207
CWE-23 Low
No
No
3.9.8.3, 3.10.1.2, 4.7.1 23.04.2026 SB20260423150
#VU127189 - Relative Path Traversal
CVE-2025-31493
CWE-23 Medium
No
No
3.9.8.3, 3.10.1.2, 4.7.1 23.04.2026 SB20260423150
#VU121188 - Permissions, Privileges, and Access Controls
CVE-2026-21896
CWE-264 Medium
No
No
5.2.2 13.01.2026 SB2026011327
#VU118587 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-65012
CWE-79 Low
No
No
5.1.4 18.11.2025 SB2025111846
#VU96614 - Incorrect Authorization
CVE-2024-41964
CWE-863 Medium
No
No
3.6.6.6, 3.7.5.5, 3.8.4.4, 3.9.8.2, 3.10.1.1, 4.3.1 29.08.2024 SB2024082920
#VU127186 - External Initialization of Trusted Variables or Data Stores
CVE-2020-26253
CWE-454 Medium
No
No
2.5.14, 3.3.6 02.12.2020 SB2020120235
#VU127185 - Unrestricted Upload of File with Dangerous Type
CVE-2020-26255
CWE-434 Medium
No
No
2.5.14, 3.4.5 02.12.2020 SB2020120235


Showing elements 21 - 40 out of 65