Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs

▤ Summary

Defiant warns that attackers are actively exploiting critical vulnerabilities in the Kirki and Burst Statistics WordPress plugins. The flaws allow unauthenticated privilege escalation, account takeover, and administrator-level access on vulnerable sites. Kirki and Burst Statistics have hundreds of thousands of active installations combined, and thousands of attacks have already been blocked. Site owners should update immediately to Kirki 6.0.7 or newer and Burst Statistics 3.4.2 or newer to reduce exposure.

▦ Linked Companies