{"affected":[{"defaultStatus":"unknown","product":"Static Snapshot","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThanOrEqual":"0.2.1","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-116533","cwes":["CWE-94"],"description":"The Static Snapshot WordPress plugin through 0.2.1 does not sanitise shell metacharacters in a user-supplied value before concatenating it into operating-system commands run by the server, allowing unauthenticated attackers to execute arbitrary commands on the host.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/bdf02d4a-3775-410b-b86f-d9dc2408cf2f/"}],"kev":null,"metrics":[],"modifiedAt":1793944825437,"publishedAt":1793944825437,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/bdf02d4a-3775-410b-b86f-d9dc2408cf2f/"}],"remediation":[],"revision":"ccd54acf4a2e793725d05d097d1502db04d8d0596ad251181050a4571fae2718","sources":[{"modifiedAt":1793944825437,"name":"CNA: WPScan","retrievedAt":1793945316963,"url":"https://www.cve.org/CVERecord?id=CVE-2026-116533"}],"ssvc":null,"status":"published","title":"Static Snapshot <= 0.2.1 - Unauthenticated RCE via 'name' Parameter","updatedAt":1793945316963}