Sensitive Information Exposure in Kirki WordPress Plugin

Executive Summary

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress has a vulnerability in all versions up to and including 6.0.11. This vulnerability allows unauthenticated attackers to access sensitive information by exploiting the get_single_symbol functionality.

Attackers can extract the full builder metadata and rendered HTML of any kirki_symbol post, including unpublished drafts, by providing a sequential WordPress post ID.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to sensitive information exposure, as attackers can retrieve detailed metadata and HTML content of posts, including unpublished drafts.

Such exposure could reveal confidential or private content that was not intended to be publicly accessible, potentially compromising the privacy and security of the website's content.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows unauthenticated attackers to extract sensitive information such as full builder metadata and rendered HTML of any kirki_symbol post, including unpublished drafts. Exposure of such sensitive information could lead to non-compliance with data protection regulations like GDPR and HIPAA, which require the protection of personal and sensitive data from unauthorized access.

Specifically, unauthorized disclosure of unpublished or sensitive content may violate confidentiality requirements and data minimization principles mandated by these standards.

Useful 0 Not Useful 0