SecAlerts
g

godaddy

Security Risk Profile

33
/100
low

Security Risk Score

Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from August 21, 2019 to present

13
Total CVEs
1
Critical+High
2
Exploited
1
Unpatched

Threat Assessment

Avg CVSS
5.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
33/100
low
⚠️ 2 Active Exploits 1 Zero-Days

Severity Distribution

Critical
0
High
1
Medium
8
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
3

Age Distribution

Common Weaknesses (CWE)

1
XSS
4
2
SSRF
1
3
CSRF
1

Most Affected Products

1. GoDaddy Coblocks Wordpress4
2. GoDaddy CoBlocks2
3. GoDaddy web hosting2
4. WordPress WordPress2
5. wordpress/coblocks1

Recent Vulnerabilities

See more →
CVE-2026-27094
CVSS 6.5EPSS 0%medium

WordPress CoBlocks plugin <= 3.1.16 - Cross Site Scripting (XSS) vulnerability

Feb 19, 2026🔧 No Patch
https://www.bleepingcomputer.com/news/security/ftc-finalizes-order-requiring-godaddy-to-secure-hosting-services/
unknown

FTC finalizes order requiring GoDaddy to secure hosting services

May 22, 2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/malware-campaign-dollyway-breached-20-000-wordpress-sites/
unknown

Malware campaign 'DollyWay' breached 20,000 WordPress sites

Mar 19, 2025🔧 No Patch
CVE-2025-24751
CVSS 4.3EPSS 0%medium

WordPress CoBlocks plugin <= 3.1.13 - Broken Access Control vulnerability

Jan 24, 2025
https://www.darkreading.com/cyber-risk/ftc-orders-godaddy-inadequate-security-practices
unknown

FTC Orders GoDaddy to Fix Inadequate Security Practices

Jan 16, 2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/ftc-orders-godaddy-to-fix-poor-web-hosting-security-practices/
unknown

FTC orders GoDaddy to fix poor web hosting security practices

Jan 16, 2025⚡ Zero-Day🔧 No Patch
CVE-2023-49156
CVSS 4.3medium

WordPress GoDaddy Email Marketing plugin <= 1.4.3 - Broken Access Control vulnerability

Dec 9, 2024🔧 No Patch
CVE-2024-7132
CVSS 4.8EPSS 0%medium

CoBlocks < 3.1.13 - Editor+ Stored XSS

Aug 29, 2024🔧 No Patch
CVE-2024-4260
CVSS 6.5medium

CoBlocks < 3.1.12 - Contributor+ SSRF

Jul 23, 2024🔧 No Patch
CVE-2024-2369
CVSS 5.4medium

Page Builder Gutenberg Blocks < 3.1.7 - Contributor+ Stored XSS

Apr 2, 2024🔧 No Patch

Monitor godaddy in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.