SiteSkite WordPress plugin: Unauthenticated remote code execution

Summary

The SiteSkite WordPress plugin (also listed as SiteSkite MCP AI) up to and including version 2.1.8 contains a flaw that allows remote code execution. An unauthenticated attacker can run arbitrary commands on the web server over the network, which gives full control over the site and possibly the host. The plugin lets an external SiteSkite account manage the site, so the exposed management interface and its API key are the relevant attack surface.

Affected

• SiteSkite WordPress plugin up to and including 2.1.8

Fixed in

• Version 2.2.0 or later (according to Patchstack; not yet confirmed in the vendor changelog)

Workaround

• Block external access to the plugin's autologin endpoint and log requests with token parameters or the API key header (stopgap, not a fix)
• Restrict egress traffic from the web server and place the site in a segmented network zone

Exploitation

• A public proof-of-concept exploit is available.
• Exploitation in the wild is not confirmed.
• The vulnerability is not listed in CISA KEV at the time of checking.
• Patchstack expects it to be exploited in mass campaigns.

Our recommendation

• Identify all WordPress sites with SiteSkite installed and check their versions.
• Update every site at 2.1.8 or earlier to version 2.2.0 or later.
• Rotate the SiteSkite API key after patching.
• Review logs, admin users, unknown plugins and files for signs of compromise, especially on internet-facing sites.

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

Links to third-party sites, not checked by us – exploit code can contain malware. Only use it in isolated test environments.

• Proof of concept on GitHub (1 repositories) iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).
  murrez/CVE-2026-96349

Research sources

• Patchstack: WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution patchstack.com
• GitHub Advisory GHSA-hcgm-2rc7-5jjp github.com
• WordPress.org: SiteSkite plugin wordpress.org
• CVE-2026-96349 record summary (threatint) cve.threatint.com
• Strix: CVE-2026-96349 www.strix.ai
• The Hacker Wire: CVE-2026-96349 www.thehackerwire.com
• MalCare: Remote code execution vulnerability www.malcare.com

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 30 Oct 2026, 14:46.