CVE-2026-81805: WordPress SiteSkite plugin <= 2.1.5 - Privilege Escalation vulnerability
Published Sep 10, 2026
·Updated
Unauthenticated Privilege Escalation in SiteSkite <= 2.1.5 versions.
Affected Software
1 affected component
wordpress/siteskite<=2.1.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress SiteSkite MCP AI pluginto a version that resolves this vulnerability.Fixed in 2.1.6
Event History
Sep 10, 2026
CVE Published
via MITRE·02:23 PM
Data Sourced
via MITRE·02:23 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The issue is described as unauthenticated, so an attacker does not need a WordPress account or existing plugin privileges.
2
What conditions affect exploitability?
The CVSS vector indicates network-based attack access with high attack complexity. No user interaction is required.
3
Which deployments are affected?
SiteSkite versions 2.1.5 and earlier are identified as affected. The provided data does not state whether any particular configuration is required.