Advisories · Technology

SiteSkite.

Every CVE that names SiteSkite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96349 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerability
- SiteSkite
- Code injection
Not analysed yet 30 Sept 2026
CVE-2026-93513 CVE record

CVSS 4.3 Medium

WordPress SiteSkite plugin <= 2.1.7 - Insecure Direct Object References (IDOR) vulnerability
- SiteSkite
- Broken access control
Not analysed yet 23 Sept 2026
CVE-2026-81805 CVE record

CVSS 8.1 High

WordPress SiteSkite plugin <= 2.1.5 - Privilege Escalation vulnerability
- SiteSkite
- Privilege escalation
Not analysed yet 10 Sept 2026