Skip to content
Noroxi

Estatik

estatik · plugin

Known security vulnerabilities for Estatik. Find out in seconds which version runs on your site with WP Lens.

7 known vulnerabilities

1 critical · latest Sep 30, 2026

Vulnerabilities

  • CVE-2026-96350

    WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability

    Critical 9.8

  • CVE-2026-96345

    WordPress Estatik plugin <= 4.3.5 - SQL Injection vulnerability

    High 7.6

  • CVE-2025-26905

    WordPress Estatik plugin <= 4.3.0 - Local File Inclusion vulnerability

    High 7.5

  • CVE-2016-10958

    The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php.

    High 7.5

  • CVE-2026-81775

    WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2025-62963

    WordPress Estatik plugin <= 4.3.1 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2016-10959

    The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-ad

    Medium 6.5

← Back to directory