SiteSkite vulnerabilities

Products

• SiteSkite 3

Latest SiteSkite CVEs

Newest publication first

1. CVE-2026-96349 WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerability

   Published 2026-09-30

   Critical·CVSS 10.0 EPSS 0.73%

   Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions.

2. CVE-2026-93513 WordPress SiteSkite plugin <= 2.1.7 - Insecure Direct Object References (IDOR) vulnerability

   Published 2026-09-23

   Medium·CVSS 4.3 EPSS 0.25%

   Contributor Insecure Direct Object References (IDOR) in SiteSkite <= 2.1.7 versions.

3. CVE-2026-81805 WordPress SiteSkite plugin <= 2.1.5 - Privilege Escalation vulnerability

   Published 2026-09-10

   High·CVSS 8.1 EPSS 0.37%

   Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.