CVE-2026-81805
HighCVSS 8.1Summary
The SiteSkite plugin in versions up to 2.1.5 contains a Privilege Escalation vulnerability. An unauthenticated attacker can elevate their privileges.
Risk Assessment
An unauthenticated attacker may gain higher privileges in the system, potentially leading to full site takeover.
Recommendation
Update the SiteSkite plugin to a version newer than 2.1.5 or disable it if no update is available.
Other vulnerabilities in SiteSkite
See all- CVE-2026-96349Critical
The SiteSkite plugin in versions up to and including 2.1.8 contains an unauthenticated remote code execution (RCE) vulnerability. An attacker can execute arbitrary code on the server without logging in.
- CVE-2026-93513Medium
The SiteSkite plugin in versions up to 2.1.7 contains an Insecure Direct Object References (IDOR) vulnerability that allows a user with the Contributor role to access objects they should not have permission to. The lack of proper permission verification on object references enables manipulation of identifiers to gain unauthorized access.
Original NVD description (English source)
Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS