CVE-2026-96350

CVSS 9.8 (critical) · published 2026-09-30

Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.

Weakness: CWE-266

Source: NVD CVE-2026-96350

References

• https://patchstack.com/database/wordpress/plugin/estatik/vulnerability/wordpress-estatik-plugin-4-3-5-privilege-escalation-vulnerability?_s_id=cve

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.