Advisories · Technology

Estatik.

Every CVE that names Estatik among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96350 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability
- Estatik
- Privilege escalation
Not analysed yet 30 Sept 2026
CVE-2026-96345 CVE record

CVSS 7.6 High

WordPress Estatik plugin <= 4.3.5 - SQL Injection vulnerability
- Estatik
- SQL injection
Not analysed yet 30 Sept 2026
CVE-2026-81775 CVE record

CVSS 7.1 High

WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability
- Estatik
- Cross-site scripting (XSS)
Not analysed yet 2 Sept 2026
CVE-2025-62963 CVE record

CVSS 6.5 Medium

WordPress Estatik plugin <= 4.3.1 - Cross Site Scripting (XSS) vulnerability
- Estatik
- Cross-site scripting (XSS)
Not analysed yet 27 Oct 2025
CVE-2025-26905 CVE record

CVSS 7.5 High

WordPress Estatik plugin <= 4.3.0 - Local File Inclusion vulnerability
- Estatik
- Path traversal
Not analysed yet 25 Feb 2025