Login Request a demo
AU
Vendor
Automattic
39 products with CVEs on record
106
CVEs
0
On KEV
7
New 30D
Products
JE
Jetpack
Automattic
8.8
18 CVEs0 on KEV2 new
SL
Sensei LMS
Automattic
5.4
9 CVEs0 on KEV2 new
WO
WooCommerce
automattic
7.6
12 CVEs0 on KEV1 new
WO
WordPress
Automattic
7.1
2 CVEs0 on KEV1 new
JV
Jetpack VideoPress
Automattic
6.5
1 CVEs0 on KEV1 new
WS
WP Super Cache
Automattic
9.8
6 CVEs0 on KEV0 new
AC
Activitypub
Automattic
7.5
5 CVEs0 on KEV0 new
JC
Jetpack CRM
Automattic
8.8
5 CVEs0 on KEV0 new
WO
Woopayments
Automattic
9.8
5 CVEs0 on KEV0 new
CD
Crowdsignal Dashboard
Automattic
8.8
4 CVEs0 on KEV0 new
MA
Mailpoet
Automattic
6.1
3 CVEs0 on KEV0 new
CE
Camptix Event Ticketing
Automattic
7.5
2 CVEs0 on KEV0 new
JB
Jetpack Boost
Automattic
9.1
2 CVEs0 on KEV0 new
MO
mongoose
Automattic
7.5
2 CVEs0 on KEV0 new
NN
Newspack Newsletters
Automattic
4.7
2 CVEs0 on KEV0 new
VA
Vaultpress
Automattic
9.8
2 CVEs0 on KEV0 new
WB
Woocommerce Blocks
Automattic
7.5
2 CVEs0 on KEV0 new
WB
Woocommerce Bookings
Automattic
8.8
2 CVEs0 on KEV0 new
WJ
WP Job Manager
Automattic
5.4
2 CVEs0 on KEV0 new
AK
Akismet
Automattic
6.1
1 CVEs0 on KEV0 new
CP
Canada Post Shipping Method
Automattic
8.8
1 CVEs0 on KEV0 new
CA
Canvas
Automattic
8.8
1 CVEs0 on KEV0 new
CF
Crowdsignal Forms
Automattic
3.8
1 CVEs0 on KEV0 new
DE
Developer
Automattic
4.3
1 CVEs0 on KEV0 new
GE
Genericons
Automattic
–
1 CVEs0 on KEV0 new
GH
Ghacitivity
Automattic
5.4
1 CVEs0 on KEV0 new
GH
Ghactivity
Automattic
5.4
1 CVEs0 on KEV0 new
JD
Jetpack Debug Tools
Automattic
5.3
1 CVEs0 on KEV0 new
NE
Newspack
Automattic
8.8
1 CVEs0 on KEV0 new
NA
Newspack Ads
Automattic
5.4
1 CVEs0 on KEV0 new
NP
Newspack Popups
Automattic
5.4
1 CVEs0 on KEV0 new
WS
W3 Super Cache
Automattic
8.8
1 CVEs0 on KEV0 new
WG
Woocommerce Gocardless
Automattic
7.5
1 CVEs0 on KEV0 new
WP
Woocommerce Payments
Automattic
9.8
1 CVEs0 on KEV0 new
WS
Woocommerce Square
Automattic
8.1
1 CVEs0 on KEV0 new
WS
Woocommerce Stripe
Automattic
9.8
1 CVEs0 on KEV0 new
WS
Woocommerce Subscriptions
Automattic
7.5
1 CVEs0 on KEV0 new
WE
Wordpress.com Editing Toolkit
Automattic
5.4
1 CVEs0 on KEV0 new
WJ
WP Job Manager - Resume Manager
Automattic
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-112329
SL
Sensei LMS
Automattic
4.3
0%
Oct 19Sensei LMS 4.26.4 Broken Access Control via save_new_message
CVE-2026-112328
SL
Sensei LMS
Automattic
4.3
0%
Oct 19Sensei LMS 4.26.4 Broken Access Control via add_new_module_term AJAX
CVE-2026-40808
JV
Jetpack VideoPress
Automattic
6.5
0%
Oct 10WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability
CVE-2026-106608
WO
WooCommerce
Automattic
7.2
0%
Oct 10WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability
CVE-2026-106601
JE
Jetpack
Automattic
5.4
0%
Oct 9WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability
CVE-2026-106602
JE
Jetpack
Automattic
4.8
0%
Oct 9WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability
CVE-2026-66666
WO
WordPress
Automattic
6.9
0%
Oct 6WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
CVE-2026-93485
WO
WordPress
Automattic
7.1
1%
Sep 18WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-48888
WO
WooCommerce
Automattic
7.5
0%
Sep 8WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability
CVE-2026-57777
WO
WooCommerce
Automattic
7.6
0%
Sep 4WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability
CVE-2026-73562
MO
mongoose
Automattic
6.5
1%
Aug 13Mongoose: Prototype pollution in the update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)
CVE-2026-42334
MO
mongoose
Automattic
7.5
0%
May 14Mongoose: Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection
CVE-2026-4338
AC
Activitypub
Automattic
7.5
0%
Apr 8ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure
CVE-2026-3589
WO
WooCommerce
Automattic
7.5
0%
Mar 6WooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRF
CVE-2026-22356
JC
Jetpack CRM
Automattic
7.5
1%
Feb 20WordPress Jetpack CRM plugin <= 6.7.0 - Local File Inclusion vulnerability
CVE-2026-25404
WJ
WP Job Manager
Automattic
5.3
0%
Feb 19WordPress WP Job Manager plugin <= 2.4.0 - Broken Access Control vulnerability
CVE-2023-54332
JE
Jetpack
Automattic
6.1
0%
Jan 13Jetpack 11.4 - Cross Site Scripting (XSS)
CVE-2023-52212
WJ
WP Job Manager
Automattic
5.4
0%
Jan 5WordPress WP Job Manager plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-69015
CF
Crowdsignal Forms
Automattic
3.8
0%
Dec 30WordPress Crowdsignal Forms plugin <= 1.7.2 - Broken Access Control vulnerability
CVE-2025-15033
WO
WooCommerce
Automattic
6.5
0%
Dec 22WooCommerce - Subscriber/Customer+ Order Data Disclosure
CVE-2023-7320
WO
WooCommerce
automattic
5.3
0%
Oct 29WooCommerce <= 7.8.2 - Sensitive Information Exposure
CVE-2025-49042
WO
WooCommerce
Automattic
5.9
0%
Oct 29WordPress WooCommerce plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-57924
DE
Developer
Automattic
4.3
0%
Sep 22WordPress Developer Plugin <= 1.2.6 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-49325
NN
Newspack Newsletters
Automattic
4.7
0%
Jun 6WordPress Newspack Newsletters plugin <= 3.13.0 - Open Redirection Vulnerability
CVE-2025-5062
WO
WooCommerce
automattic
6.1
0%
May 22WooCommerce <= 9.4.2 - PostMessage-Based Cross-Site Scripting
CVE-2024-8009
SL
Sensei Lms
Automattic
4.3
0%
May 15Sensei LMS < 4.20.0 - Teacher+ Users Email Address Disclosure
CVE-2024-6584
JB
Jetpack Boost
Automattic
9.1
1%
May 15Jetpack Boost < 3.4.7 - Admin+ SSRF
CVE-2024-12743
MA
Mailpoet
Automattic
4.8
0%
May 15MailPoet < 5.5.2 - Admin+ Stored XSS
CVE-2024-10076
JE
Jetpack
Automattic
5.9
0%
May 15Jetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS
CVE-2024-10075
JE
Jetpack
Automattic
5.6
0%
May 15Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution
CVE-2024-56006
JD
Jetpack Debug Tools
Automattic
5.3
0%
May 15WordPress Jetpack Debug Tools plugin < 2.0.1 - Broken Access Control vulnerability
CVE-2025-22740
SL
Sensei LMS
Automattic
5.3
0%
Mar 27WordPress Sensei LMS plugin <= 4.24.4 - Broken Access Control vulnerability
CVE-2025-26762
WO
WooCommerce
Automattic
5.9
0%
Mar 27WordPress WooCommerce plugin <= 9.7.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-0466
SL
Sensei Lms
Automattic
5.3
0%
Feb 4The Sensei LMS WordPress plugin before 4.24.4 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak sensei_email and sensei_message…
CVE-2024-37241
WJ
WP Job Manager - Resume Manager
Automattic
4.3
0%
Jan 2WordPress WP Job Manager Resume Manager plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-37242
NN
Newspack Newsletters
Automattic
4.3
0%
Jan 2WordPress Newspack Newsletters plugin <= 2.13.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-10858
JE
Jetpack
Automattic
6.1
0%
Dec 25Jetpack 13.0-14.0 - Unauthenticated DOM-XSS
CVE-2024-10103
MA
Mailpoet
Automattic
6.1
0%
Nov 19In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding…
CVE-2024-9926
JE
Jetpack
Automattic
4.3
1%
Nov 7The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data…
CVE-2024-43968
NE
Newspack
Automattic
8.8
0%
Nov 1Broken Access Control vulnerability in Automattic Newspack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack: from n/a through…
CVE-2024-7786
SL
Sensei Lms
Automattic
5.3
2%
Sep 4Sensei LMS < 4.24.2 - Unauthenticated Email Template Leak
CVE-2024-43949
GH
Ghacitivity
Automattic
5.4
0%
Aug 29Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic GHActivity allows Stored XSS.This issue affects GHActivity:…
CVE-2024-37474
NA
Newspack Ads
Automattic
5.4
0%
Jul 4Cross Site Scripting (XSS) vulnerability in Automattic Newspack Ads allows Stored XSS.This issue affects Newspack Ads: from n/a through 1.47.1
CVE-2024-37476
NP
Newspack Popups
Automattic
5.4
0%
Jul 4Cross Site Scripting (XSS) vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1
CVE-2023-47788
JE
Jetpack
Automattic
8.8
0%
Jun 19Missing Authorization vulnerability in Automattic Jetpack.This issue affects Jetpack: from n/a before 12.7
CVE-2024-4392
JE
Jetpack
Automattic
5.4
0%
May 14The Jetpack – WP Security, Backup, Speed, & Growth plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpvideo shortcode in all versions up to, and…
CVE-2023-47774
JE
Jetpack
Automattic
5.4
0%
Apr 24Improper Restriction of Rendered UI Layers or Frames vulnerability in Automattic Jetpack allows Clickjacking.This issue affects Jetpack: from n/a before 12.7
CVE-2024-1310
WO
Woocommerce
Automattic
4.9
1%
Apr 15The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't have access to
CVE-2023-51489
CD
Crowdsignal Dashboard
Automattic
8.8
0%
Mar 16Cross-Site Request Forgery (CSRF) vulnerability in Automattic, Inc
CVE-2023-50875
SL
Sensei Lms
Automattic
5.4
0%
Feb 12Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic Sensei LMS – Online Courses, Quizzes, & Learning allows Stored…
CVE-2023-51488
CD
Crowdsignal Dashboard
Automattic
6.1
0%
Feb 10Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic, Inc
CVE-2023-51502
WS
Woocommerce Stripe
Automattic
9.8
1%
Jan 5Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a…
CVE-2023-51503
WO
Woopayments
Automattic
7.5
0%
Dec 31Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo.This issue affects WooPayments –…
CVE-2023-50879
WE
Wordpress.com Editing Toolkit
Automattic
5.4
0%
Dec 29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WordPress.Com Editing Toolkit allows Stored XSS.This issue affects…
CVE-2023-32747
WB
Woocommerce Bookings
Automattic
7.5
0%
Dec 21Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Bookings.This issue affects WooCommerce Bookings: from n/a through 1.15.78
CVE-2023-35916
WO
Woopayments
Automattic
7.5
1%
Dec 20Authorization Bypass Through User-Controlled Key vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo.This issue affects WooPayments –…
CVE-2023-35915
WO
Woopayments
Automattic
9.8
1%
Dec 20Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Automattic WooPayments – Fully Integrated Solution Built and Supported by…
CVE-2023-35914
WS
Woocommerce Subscriptions
Automattic
7.5
1%
Dec 20Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Woo Subscriptions.This issue affects Woo Subscriptions: from n/a through 5.1.2
CVE-2023-35876
WS
Woocommerce Square
Automattic
8.1
1%
Dec 20Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Square.This issue affects WooCommerce Square: from n/a through 3.8.1
CVE-2023-37871
WG
Woocommerce Gocardless
Automattic
7.5
1%
Dec 20Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce GoCardless.This issue affects GoCardless: from n/a through 2.5.6