CVE-2026-116533: Static Snapshot <= 0.2.1 - Unauthenticated RCE via 'name' Parameter

Q: Which installations are exposed?

WordPress sites using the Static Snapshot plugin version 0.2.1 or earlier are affected. The issue is reachable without authentication.

Q: What does an attacker need to exploit this issue?

An attacker only needs to supply a crafted value through the affected name parameter. Shell metacharacters in that value can be incorporated into operating-system commands executed by the server.

Q: What is the potential impact of successful exploitation?

Successful exploitation allows arbitrary command execution on the host running the WordPress site. The resulting impact depends on the permissions of the process executing those commands.

Published Nov 6, 2026

Updated

The Static Snapshot WordPress plugin through 0.2.1 does not sanitise shell metacharacters in a user-supplied value before concatenating it into operating-system commands run by the server, allowing unauthenticated attackers to execute arbitrary commands on the host.

Event History

Nov 6, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

Which installations are exposed?

WordPress sites using the Static Snapshot plugin version 0.2.1 or earlier are affected. The issue is reachable without authentication.

What does an attacker need to exploit this issue?

An attacker only needs to supply a crafted value through the affected name parameter. Shell metacharacters in that value can be incorporated into operating-system commands executed by the server.

What is the potential impact of successful exploitation?

Successful exploitation allows arbitrary command execution on the host running the WordPress site. The resulting impact depends on the permissions of the process executing those commands.

CVE-2026-116533: Static Snapshot <= 0.2.1 - Unauthenticated RCE via 'name' Parameter

Event History

Frequently Asked Questions

Which installations are exposed?

What does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which installations are exposed?

What does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?