Kirki – Freeform Page Builder, Website Builder & Customizer
Kirki – Freeform Page Builder, Website Builder & Customizer has 41 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 41 are fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 9.8 out of 10. Severity breakdown: 3 critical and 13 high. 2026 was the busiest year with 41 disclosures.
The most common weakness is Cross-Site Scripting, behind 9 of the records (22%). Other recurring categories include Missing Authorization, Authorization Bypass Through User-Controlled Key.
Every one of the 41 issues recorded for Kirki – Freeform Page Builder, Website Builder & Customizer has a vendor fix available, so running the current release closes all known holes.
28 independent researchers contributed these findings, most of them (4) reported by Jakub Herman. Kirki – Freeform Page Builder, Website Builder & Customizer is installed on roughly 500,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-103065Kirki – Freeform Page Builder, Website Builder & Customizer <= 6.3.1 - Unauthenticated Remote Code Execution
Read the full analysisVulnerability Records
Kirki – Freeform Page Builder, Website Builder & Customizer
Author
Themeum
Kirki is a freeform visual builder for WordPress and an advanced theme customizer that lets you design and build complete websites visually — without coding. Unlike traditional page builders, Kirki uses an infinite freeform canvas, giving you full creative freedom without rigid grids or layout restrictions. Build landing pages, business websites, blogs, and full websites with responsive controls, dynamic content, and powerful design tools — all inside WordPress. Watch Kirki in action: 🔥 Why Choose Kirki? Kirki combines a modern visual builder with WordPress’s powerful customization system — so you can design freely without sacrificing flexibility. ✔ Freeform canvas — no rigid layouts or constraints ✔ Drag-and-drop visual editor with precise control ✔ Responsive editing for desktop, tablet, and mobile ✔ Built-in tools (forms, popups, dynamic content) ✔ Clean, performance-focused output ✔ Works with any WordPress theme ✔ Built for designers, developers, and teams 🧱 Core Features Visual Website Builder Design your website visually with full control. Freeform drag-and-drop editor Infinite canvas — no grid or column restrictions Real-time responsive editing (desktop, tablet, mobile) Pre-built components and layout blocks Global styles (colors, fonts, spacing) Version history and rollback Media manager for assets Light & dark mode interface ⚡ Dynamic Content & Smart Features Build scalable, data-driven websites. Dynamic content system (collections & templates) Conditional visibility controls Custom attributes for advanced control Developer-friendly extensibility Reusable design systems and components 🎨 Templates & Design Assets Start fast and customize everything. Ready-made website templates Pre-built sections and layout blocks Reusable design assets Import / export projects easily 🧩 Built-in Tools Everything you need — without extra plugins. Form builder with submission management Popup builder with visual controls Interaction and animation builder Icon library and media tools 🎬 Interactions & Animations Create engaging, modern experiences. Visual animation builder Interaction timeline editor Custom transitions and effects Text animation tools ⚙️ Advanced WordPress Customizer Extend WordPress customization with powerful controls. 35+ customizer controls Real-time preview Automatic CSS generation Conditional logic support Developer-friendly API Performance optimized 👥 Who Is Kirki For? Designers who want full creative freedom Freelancers building client websites Agencies managing multiple projects Developers extending WordPress functionality Anyone looking for a no-code visual builder for WordPress 🚀 What Makes Kirki Different? Kirki is not just another page builder. Instead of forcing layouts into rows and columns, Kirki gives you a freeform design experience — similar to modern design tools — while keeping the full power of WordPress. Design freely. Build with WordPress. Support Community support: https://facebook.com/groups/kirkicommunity Documentation: https://kirki.com/docs Website: https://kirki.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C