All packages
Estatik vulnerabilities
3 known CVE vulnerabilities in Estatik, translated and rated.
- CVE-2026-96345High
Administrator SQL Injection vulnerability in Estatik up to version 4.3.5.
- CVE-2026-96350Critical
The Estatik plugin in versions up to and including 4.3.5 allows a subscriber to escalate privileges. A low-privileged user can gain higher privileges.
- CVE-2026-81775High
Unauthenticated XSS vulnerability in Estatik versions up to 4.3.4. An attacker can inject a malicious script that executes in the victim's browser.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS