CyberSecBulletin

Skatox vulnerabilities

We track 2 vulnerabilities in Skatox products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 7, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Skatox vulnerabilities

  • 7.5 High severity

    JS Archive List: Deserialization of Untrusted Data

    CVE-2026-2020Skatox

    The JS Archive List plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.1.7 via the 'included' shortcode attribute. This is due to the deserialization of untrusted input supplied via the 'included' parameter of th

  • 7.5 High severity

    JS Archive List: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2025-7670Skatox

    The JS Archive List plugin for WordPress is vulnerable to time-based SQL Injection via the build_sql_where() function in all versions up to, and including, 6.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on