Skip to content
OpenAdvisories

Vendor

Estatik

10 known vulnerabilities.

Products

Estatik 5 Estatik Mortgage Calculator 3 Mortgage Calculator Estatik 2
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.6
    CVE-2026-96345

    WordPress Estatik plugin <= 4.3.5 - SQL Injection vulnerability

    Administrator SQL Injection in Estatik <= 4.3.5 versions.

    Estatik Estatik
  • High 7.1
    CVE-2026-81775

    WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Estatik <= 4.3.4 versions.

    Estatik Estatik
  • High 7.5
    CVE-2025-48136

    WordPress Mortgage Calculator Estatik plugin <= 2.0.12 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Estatik Mortgage Calculator Estatik estatik-mortgage-calculator allows PHP Local File Inclusion.This issue affects Mortgage Calculator Est…

    Estatik Mortgage Calculator Estatik
  • High 7.5
    CVE-2025-26905

    WordPress Estatik plugin <= 4.3.0 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estatik Estatik estatik allows PHP Local File Inclusion.This issue affects Estatik: from n/a through <= 4.3.0.

    Estatik Estatik
  • High 7.5
    CVE-2025-26907

    WordPress Estatik Mortgage Calculator plugin <= 2.0.12 - Local File Inclusion vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Estatik Mortgage Calculator Estatik estatik-mortgage-calculator allows Stored XSS.This issue affects Mortgage Calculator Estatik: from n/a through <= 2.0.12.

    Estatik Mortgage Calculator Estatik
  • High 7.1
    CVE-2023-28490

    WordPress Mortgage Calculator Estatik Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Estatik Estatik Mortgage Calculator plugin <= 2.0.7 versions.

    Estatik Estatik Mortgage Calculator
  • High 7.1
    CVE-2023-40601

    WordPress Mortgage Calculator Estatik Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Estatik Estatik Mortgage Calculator plugin <= 2.0.7 versions.

    Estatik Estatik Mortgage Calculator