Skip to content
The Nexus
DossierENTITY

CVE-2026-8206

Coverage of CVE-2026-8206 in the Nexus archive.

Earliest in view: Jun 2 · 22:12 UTCMost recent: Jun 2 · 22:12 UTC
Co-mentioned in this coverage
Kirki plugintopic1WordPresstopic1hackersperson1
Recent coverage
  • SECURITYJun 2 · 22:12 UTCBLEEPING COMPUTER
    Critical Kirki flaw exploited to hijack WordPress admin accounts

    Hackers are exploiting a critical privilege escalation vulnerability (CVE-2026-8206) in the Kirki plugin for WordPress to take over any user account, including administrators. The flaw allows unauthorized access to WordPress admin accounts through the Kirki plugin.