CVE Intelligence

Estatik vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Estatik products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-81775 High · 7.1 CWE-79 Sep 2, 2026
WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Estatik <= 4.3.4 versions.
CVE-2025-62963 Medium · 6.5 CWE-79 Oct 26, 2025
WordPress Estatik plugin <= 4.3.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Estatik Estatik estatik allows DOM-Based XSS.This issue affects Estatik: from n/a through <= 4.3.1.