https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/kirki/kirki-freeform-page-builder-website-builder-customizer-6013-missing-authorization.
Description
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 6.1.1. This makes it possible for unauthenticated attackers to perform an unauthorized action.
Hello @sessionstudio @nicko2u,
We are already in touch with Patchstack regarding this and actively working on resolution. Once security update is released, simply update the plugin to latest version to receive the fix.
We appreciate your patience and understanding.
Best regards,
Nafiz | Kirki Support Team
Hello @sessionstudio @nicko2u,
Good news! We have released a new version that includes security fixes and updates. Please update to the latest version.
Thank you for your patience!
