Here is a concise summary of the article in 2-3 sentences for a technical security audience: A vulnerability in the Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress allows an attacker to escalate their privileges by sending a password reset request to a user's email address, potentially allowing them to gain access to that user's account. The vulnerability affects all versions of the plugin from 6.0.0 to 6.0.6. The vulnerability is due to an arbitrary email address being accepted in the password reset request, rather than the username. The vulnerability has been identified by Wordfence and is not yet prioritized for NVD enrichment efforts.