CVE-2026-116533

— UNSCORED

Published 2026-11-06 · Updated 2026-11-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

The Static Snapshot WordPress plugin through 0.2.1 does not sanitise shell metacharacters in a user-supplied value before concatenating it into operating-system commands run by the server, allowing unauthenticated attackers to execute arbitrary commands on the host.

All references

https://wpscan.com/vulnerability/bdf02d4a-3775-410b-b86f-d9dc2408cf2f/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.