Critical Vulnerability in Static Snapshot WordPress Plugin Allows Unauthenticated Command Execution
A critical vulnerability, CVE-2026-116533, with a CVSS score of 9.8, was discovered in the Static Snapshot WordPress plugin (version 0.2.1 and below). This vulnerability allows unauthenticated attackers to execute arbitrary commands on the host by exploiting a lack of sanitization of shell metacharacters in user-supplied values. Immediate patching or mitigation is recommended to prevent potential exploitation.