Login Request a demo
ES
Product
Estatik
by Estatik · last CVE Sep 30, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 2High 4Medium 4Low 0
Severity
All severities10Critical2High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Estatik to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-96350
9.8
0%
Sep 30
WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability
Affected: through 4.3.5
CVE-2023-6049
9.8
1%
Jan 15
Estatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection
Affected: before 4.1.1
CVE-2026-96345
7.6
0%
Sep 30
WordPress Estatik plugin <= 4.3.5 - SQL Injection vulnerability
Affected: through 4.3.5
CVE-2025-26905
7.5
1%
Feb 25
WordPress Estatik plugin <= 4.3.0 - Local File Inclusion vulnerability
Affected: through 4.3.0
CVE-2016-10958
7.5
2%
Sep 16
The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php
Affected: before 2.3.0
CVE-2026-81775
7.1
0%
Sep 2
WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability
Affected: through 4.3.4
CVE-2025-62963
6.5
0%
Oct 27
WordPress Estatik plugin <= 4.3.1 - Cross Site Scripting (XSS) vulnerability
Affected: through 4.3.1
CVE-2023-6048
6.5
1%
Jan 15
Estatik Real Estate Plugin < 4.1.1 - Subscriber+ Arbitrary Option Update
Affected: before 4.1.1
CVE-2016-10959
6.5
1%
Sep 16
The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin-ajax.php
Affected: before 2.3.1
CVE-2023-6050
6.1
0%
Jan 15
Estatik Real Estate Plugin < 4.1.1 - Reflected XSS
Affected: before 4.1.1
Showing 10