CVE-2026-116533

UNKNOWN 0.0

Static Snapshot <= 0.2.1 - Unauthenticated RCE via 'name' Parameter

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Static Snapshot WordPress plugin through 0.2.1 does not sanitise shell metacharacters in a user-supplied value before concatenating it into operating-system commands run by the server, allowing unauthenticated attackers to execute arbitrary commands on the host.

Vendor	unknown
Product	static snapshot
Published	Nov 6, 2026

Stay Ahead of the Next One

Get instant alerts for unknown static snapshot

Be the first to know when new unknown vulnerabilities affecting unknown static snapshot are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Static Snapshot

0 ≤ 0.2.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/bdf02d4a-3775-410b-b86f-d9dc2408cf2f/

Credits

Enrico Marcolini Claudio Marchesini Dottor Marc WPScan