ES
Vendor
Estatik
16
CVEs
0
On KEV
2
New 30D
Products
ES9.8
Estatik
Estatik
10 CVEs0 on KEV2 new
EM6.1
Estatik Mortgage Calculator
estatik
3 CVEs0 on KEV0 new
MC8.8
Mortgage Calculator Estatik
Estatik
2 CVEs0 on KEV0 new
MC8.8
Mortgage Calculator
Estatik
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-96350 | ES Estatik Estatik | 9.8 | Sep 30 | WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability |
| CVE-2026-96345 | ES Estatik Estatik | 7.6 | Sep 30 | WordPress Estatik plugin <= 4.3.5 - SQL Injection vulnerability |
| CVE-2026-81775 | ES Estatik Estatik | 7.1 | Sep 2 | WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-62963 | ES Estatik Estatik | 6.5 | Oct 27 | WordPress Estatik plugin <= 4.3.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-48136 | MC Mortgage Calculator Estatik Estatik | 8.8 | May 16 | WordPress Mortgage Calculator Estatik plugin <= 2.0.12 - Local File Inclusion Vulnerability |
| CVE-2025-26907 | MC Mortgage Calculator Estatik Estatik | 7.5 | Feb 25 | WordPress Estatik Mortgage Calculator plugin <= 2.0.12 - Local File Inclusion vulnerability |
| CVE-2025-26905 | ES Estatik Estatik | 7.5 | Feb 25 | WordPress Estatik plugin <= 4.3.0 - Local File Inclusion vulnerability |
| CVE-2024-9354 | EM Estatik Mortgage Calculator estatik | 6.1 | Jan 7 | Estatik Mortgage Calculator <= 2.0.11 - Reflected Cross-Site Scripting |
| CVE-2023-6050 | ES Estatik Estatik | 6.1 | Jan 15 | The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generated URLs before outputting them back in attributes, leading… |
| CVE-2023-6049 | ES Estatik Estatik | 9.8 | Jan 15 | The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthenticated users to perform PHP Object… |
| CVE-2023-6048 | ES Estatik Estatik | 6.5 | Jan 15 | The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like subscribers, from setting any of the site's options to 1,… |
| CVE-2023-28490 | EM Estatik Mortgage Calculator Estatik | 6.1 | Sep 27 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Estatik Estatik Mortgage Calculator plugin <= 2.0.7 versions |
| CVE-2023-40601 | EM Estatik Mortgage Calculator Estatik | 6.1 | Sep 6 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Estatik Estatik Mortgage Calculator plugin <= 2.0.7 versions |
| CVE-2016-10959 | ES Estatik Estatik | 6.5 | Sep 16 | The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin-ajax.php |
| CVE-2016-10958 | ES Estatik Estatik | 7.5 | Sep 16 | The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php |