CVE Intelligence

Estatik Estatik vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Estatik Estatik: 4 record(s), with affected versions and fixes.

CVE-2026-96350 Critical · 9.8 CWE-266 Sep 30, 2026
WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.
CVE-2026-96345 High · 7.6 CWE-89 Sep 30, 2026
WordPress Estatik plugin <= 4.3.5 - SQL Injection vulnerability
Administrator SQL Injection in Estatik <= 4.3.5 versions.
CVE-2026-81775 High · 7.1 CWE-79 Sep 2, 2026
WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Estatik <= 4.3.4 versions.
CVE-2025-62963 Medium · 6.5 CWE-79 Oct 26, 2025
WordPress Estatik plugin <= 4.3.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Estatik Estatik estatik allows DOM-Based XSS.This issue affects Estatik: from n/a through <= 4.3.1.