{"id":"CVE-2026-116533","published":"2026-11-06T06:16:40.480","lastModified":"2026-11-06T06:16:40.480","description":"The Static Snapshot WordPress plugin through 0.2.1 does not sanitise shell metacharacters in a user-supplied value before concatenating it into operating-system commands run by the server, allowing unauthenticated attackers to execute arbitrary commands on the host.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/bdf02d4a-3775-410b-b86f-d9dc2408cf2f/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}