ES
Vendor
Estatik
4 products with CVEs on record
16
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-96350
ES
Estatik
Estatik
9.8
0%
Sep 30WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability
CVE-2026-96345
ES
Estatik
Estatik
7.6
0%
Sep 30WordPress Estatik plugin <= 4.3.5 - SQL Injection vulnerability
CVE-2026-81775
ES
Estatik
Estatik
7.1
0%
Sep 2WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62963
ES
Estatik
Estatik
6.5
0%
Oct 27WordPress Estatik plugin <= 4.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-48136
MC
Mortgage Calculator Estatik
Estatik
8.8
1%
May 16WordPress Mortgage Calculator Estatik plugin <= 2.0.12 - Local File Inclusion Vulnerability
CVE-2025-26907
MC
Mortgage Calculator Estatik
Estatik
7.5
0%
Feb 25WordPress Estatik Mortgage Calculator plugin <= 2.0.12 - Local File Inclusion vulnerability
CVE-2025-26905
ES
Estatik
Estatik
7.5
1%
Feb 25WordPress Estatik plugin <= 4.3.0 - Local File Inclusion vulnerability
CVE-2024-9354
EM
Estatik Mortgage Calculator
estatik
6.1
0%
Jan 7Estatik Mortgage Calculator <= 2.0.11 - Reflected Cross-Site Scripting
CVE-2023-6050
ES
Estatik
Estatik
6.1
0%
Jan 15Estatik Real Estate Plugin < 4.1.1 - Reflected XSS
CVE-2023-6048
ES
Estatik
Estatik
6.5
1%
Jan 15Estatik Real Estate Plugin < 4.1.1 - Subscriber+ Arbitrary Option Update
CVE-2023-6049
ES
Estatik
Estatik
9.8
1%
Jan 15Estatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection
CVE-2023-28490
EM
Estatik Mortgage Calculator
Estatik
6.1
0%
Sep 27WordPress Mortgage Calculator Estatik Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-40601
EM
Estatik Mortgage Calculator
Estatik
6.1
0%
Sep 6WordPress Mortgage Calculator Estatik Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)
CVE-2016-10959
ES
Estatik
Estatik
6.5
1%
Sep 16The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin-ajax.php
CVE-2016-10958
ES
Estatik
Estatik
7.5
2%
Sep 16The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php