estatik

WordPress · Plugin

14 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Estatik Real Estate Plugin <= 4.3.5 - Authenticated (Administrator+) SQL InjectionCVE-2026-96345	estatik	WordPress	Medium	Fix reported	2026-09-30
Estatik Real Estate Plugin <= 4.3.5 - Authenticated (Subscriber+) Privilege EscalationCVE-2026-96350	estatik	WordPress	Medium	Fix reported	2026-09-30
Estatik <= 4.3.4 - Reflected Cross-Site ScriptingCVE-2026-76790	estatik	WordPress	Medium	Fix reported	2026-09-22
Estatik Real Estate <= 4.3.2 - Unauthenticated Mail RelayCVE-2026-14547	estatik	WordPress	Medium	Fix reported	2026-09-16
Estatik Real Estate Plugin <= 4.3.4 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-81775	estatik	WordPress	High	No fix reported	2026-09-09
Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Mail RelayCVE-2026-18044	estatik	WordPress	Medium	Fix reported	2026-08-24
Estatik <= 4.3.2 - Cross-Site Request ForgeryCVE-2026-16262	estatik	WordPress	Medium	Fix reported	2026-08-16
Estatik <= 4.3.1 - Authenticated (Contributor+) Local File InclusionCVE-2025-26905	estatik	WordPress	High	Fix reported	2026-06-23
Estatik <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-62963	estatik	WordPress	Medium	No fix reported	2026-03-23
Estatik <= 2.2.5 - Unauthenticated Arbitrary File UploadCVE-2016-10958	estatik	WordPress	Critical	Fix reported	2024-06-17
Estatik Real Estate Plugin <= 4.1.0 - Missing Authorization to Limited Arbitrary Options UpdateCVE-2023-6048	estatik	WordPress	Medium	Fix reported	2024-02-06
Estatik Real Estate Plugin <= 4.1.0 - Unauthenticated PHP Object InjectionCVE-2023-6049	estatik	WordPress	Critical	Fix reported	2024-02-06
Estatik Real Estate Plugin <= 4.1.0 - Reflected Cross-Site ScriptingCVE-2023-6050	estatik	WordPress	Medium	Fix reported	2024-02-06
Estatik <= 2.3.0 - Cross-Site Request Forgery to Arbitrary File UploadCVE-2016-10959	estatik	WordPress	High	Fix reported	2024-01-22