Product
The Kirki plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) flaw via the 'context' parameter, allowing unauthenticated attackers to exfiltrate sensitive user profile data.