An active cyber threat is targeting thousands of website environments globally. Specifically, a critical Kirki plugin vulnerability exposes The post Kirki Plugin Vulnerability: 150K WordPress Sites Face Critical 9.8 CVSS Privilege Escalation in the Wild appeared first on Daily CyberSecurity. Related posts: Record-Breaking Payout: Google Awards $250,000 for a Critical Chrome Flaw (CVE-2025-4609) CVE-2025-5821: Critical Authentication Bypass in WordPress Case Theme User Plugin Exploited in the Wild Hackers Actively Exploiting 9.8 Critical RCE Flaw in Kali Forms WordPress Plugin