Estatik vulnerabilities
We track 4 vulnerabilities in Estatik products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on May 16, 2025.
Latest Estatik vulnerabilities
- 8.8 High severity
Mortgage Calculator Estatik: Use of Incorrectly-Resolved Name or Reference
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Estatik Mortgage Calculator Estatik estatik-mortgage-calculator allows PHP Local File Inclusion.This issue affects Mortgage Calculator Esta
- 7.5 High severity
Mortgage Calculator Estatik: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Estatik Mortgage Calculator Estatik estatik-mortgage-calculator allows Stored XSS.This issue affects Mortgage Calculator Estatik: from n/a through <= 2.0.12.
- 7.5 High severity
Estatik: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estatik Estatik estatik allows PHP Local File Inclusion.This issue affects Estatik: from n/a through <= 4.3.0.
- 9.8 Critical severity
Estatik Real Estate Plugin: Deserialization of Untrusted Data
The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget chain is present on the blog