automattic

Top products

The 15 most recently published vulnerabilities affecting automattic.

• CVE-2026-93485WordPress core <= 7.1 - Unauth. Cross Site Scripting (XSS) vulnerability7.1Sep 18, 2026
• CVE-2026-48888WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerability7.5Sep 8, 2026
• CVE-2026-57777WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability7.6Sep 4, 2026
• CVE-2026-73562Mongoose: Prototype pollution in the update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)6.5Aug 13, 2026
• CVE-2026-42334Mongoose: Improper Sanitization of $nor in sanitizeFilter May Allow NoSQL Injection7.5May 14, 2026
• CVE-2026-4338ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure7.5Apr 8, 2026
• CVE-2026-3589WooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRF7.5Mar 6, 2026
• CVE-2026-22356WordPress Jetpack CRM plugin <= 6.7.0 - Local File Inclusion vulnerability7.5Feb 20, 2026
• CVE-2026-25404WordPress WP Job Manager plugin <= 2.4.0 - Broken Access Control vulnerability5.3Feb 19, 2026
• CVE-2023-54332Jetpack 11.4 - Cross Site Scripting (XSS)6.1Jan 13, 2026
• CVE-2023-52212WordPress WP Job Manager plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability5.4Jan 5, 2026
• CVE-2025-69015WordPress Crowdsignal Forms plugin <= 1.7.2 - Broken Access Control vulnerability3.8Dec 30, 2025
• CVE-2025-15033WooCommerce - Subscriber/Customer+ Order Data Disclosure6.5Dec 22, 2025
• CVE-2023-7320WooCommerce <= 7.8.2 - Sensitive Information Exposure5.3Oct 29, 2025
• CVE-2025-49042WordPress WooCommerce plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability5.9Oct 29, 2025