Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how automattic compares to other vendors in security performance

View Risk Score →

Software

automattic woocommerce
8
automattic jetpack wordpress
6
automattic sensei lms
5
automattic woopayments wordpress
5
automattic jetpack
4
automattic newspack blocks
4
automattic wp job manager
4
automattic crowdsignal dashboard wordpress
3
automattic newspack newsletters
3
automattic woocommerce wordpress
3
automattic camptix event ticketing wordpress
2
automattic crowdsignal polls & ratings
2
automattic jetpack boost wordpress
2
automattic jetpack crm
2
automattic jetpack crm wordpress
2
automattic woocommerce bookings wordpress
2
automattic wordpress
2
automattic wp job manager - resume manager
2
automattic activitypub wordpress
1
automattic canada post shipping method wordpress
1
automattic canvas
1
automattic chaostheory
1
automattic crowdsignal dashboard
1
automattic customer reviews for woocommerce
1
automattic developer (wordpress plugin)
1
automattic ghacitivity wordpress
1
automattic ghactivity wordpress
1
automattic jetpack debug tools
1
automattic newspack ads wordpress
1
automattic newspack content converter
1
automattic newspack popups wordpress
1
automattic newspack wordpress
1
automattic sensei lms wordpress
1
automattic sensei pro (wc paid courses)
1
automattic tours (wordpress plugin)
1
automattic woocommerce blocks wordpress
1
automattic woocommerce gocardless wordpress
1
automattic woocommerce payments wordpress
1
automattic woocommerce square wordpress
1
automattic woocommerce stripe wordpress
1
automattic woocommerce subscriptions wordpress
1
automattic woopayments
1
automattic wordpress sensei lms plugin
1
automattic wordpress.com editing toolkit wordpress
1
automattic wp super cache wordpress
1

Automattic WooCommerceWooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php

Risk 86
Severity
9.3
First published (updated )
CVE-2022-50972

Automattic JetpackWordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php

Risk 38
Severity
5.1
First published (updated )
CVE-2022-50958

Automattic WP Job ManagerWordPress WP Job Manager plugin <= 2.4.1 - Broken Access Control vulnerability

Risk 25
Severity
5.3
First published (updated )
CVE-2026-39660

wordpress/activitypubActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure

Risk 31
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2026-4338

Automattic WooPaymentsWooPayments <= 10.5.1 - Missing Authorization to Unauthenticated Plugin Settings Update via save_upe_appearance_ajax

Risk 40
Severity
6.5
First published (updated )
CVE-2026-1710
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Automattic WP Job ManagerWordPress WP Job Manager plugin <= 2.4.0 - Broken Access Control vulnerability

Risk 19
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2026-25404

Automattic JetpackJetpack 11.4 - Cross Site Scripting (XSS)

Risk 38
Severity
5.1
First published (updated )
CVE-2023-54332

Automattic WP Job ManagerWordPress WP Job Manager plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Risk 34
Severity
5.4
First published (updated )
CVE-2023-52212

Automattic WooCommerceWooCommerce <= 7.8.2 - Sensitive Information Exposure

Risk 27
Severity
5.3
First published (updated )
CVE-2023-7320

Automattic WooCommerceWordPress WooCommerce plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability

Risk 40
Severity
5.9
First published (updated )
CVE-2025-49042
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Automattic Developer (WordPress plugin)WordPress Developer Plugin <= 1.2.6 - Cross Site Request Forgery (CSRF) Vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2025-57924

Automattic Newspack NewslettersWordPress Newspack Newsletters plugin <= 3.13.0 - Open Redirection Vulnerability

Risk 17
Severity
4.7
EPSS
0.03%
First published (updated )
CVE-2025-49325

WooCommerce WooCommerce WordPressWooCommerce <= 9.4.2 - PostMessage-Based Cross-Site Scripting

Risk 27
Severity
6.1
EPSS
0.10%
First published (updated )
CVE-2025-5062

Sensei LMSSensei LMS < 4.20.0 - Teacher+ Users Email Address Disclosure

Risk 22
Severity
4.3
First published (updated )
CVE-2024-8009

Jetpack Jetpack BoostJetpack Boost < 3.4.7 - Admin+ SSRF

Risk 66
Severity
9.1
First published (updated )
CVE-2024-6584
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MailPoet MailPoetMailPoet < 5.5.2 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-12743

Automattic JetpackJetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS

Risk 40
Severity
5.9
First published (updated )
CVE-2024-10076

Automattic JetpackJetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution

Risk 42
Severity
5.6
First published (updated )
CVE-2024-10075

Automattic Tours (WordPress plugin)WordPress Tours plugin <= 1.0.0 - Broken Access Control vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2024-51666

Automattic Jetpack Debug ToolsWordPress Jetpack Debug Tools plugin < 2.0.1 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2024-56006
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Automattic Sensei LMSWordPress Sensei LMS plugin <= 4.24.4 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2025-22740

Sensei LMSSensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message Disclosure

Risk 27
Severity
5.3
First published (updated )
CVE-2025-0466

Automattic WP Job Manager - Resume ManagerWordPress WP Job Manager Resume Manager plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2024-37241

Automattic Newspack NewslettersWordPress Newspack Newsletters plugin <= 2.13.2 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20
Severity
4.3
First published (updated )
CVE-2024-37242

Automattic Jetpack WordpressJetpack 13.0-14.0 - Unauthenticated DOM-XSS

Risk 38
Severity
6.1
First published (updated )
CVE-2024-10858
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Automattic Crowdsignal Polls & RatingsWordPress Crowdsignal Polls & Ratings plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20
Severity
4.3
First published (updated )
CVE-2024-43338

MailPoet MailPoetMailPoet < 5.3.2 - Admin+ Stored XSS

Risk 38
Severity
6.1
First published (updated )
CVE-2024-10103

CusRev Customer Reviews For Woocommerce WordpressCustomer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation

Risk 22
Severity
4.3
First published (updated )
CVE-2024-10614

Automattic Jetpack WordpressJetpack < 13.9.1 - Subscriber+ Arbitrary Feedback Access

Risk 16
Severity
4.3
EPSS
0.04%
First published (updated )
CVE-2024-9926

Automattic Newspack BlocksWordPress Newspack Blocks plugin <= 3.0.8 - Contributor+ Arbitrary Directory Deletion vulnerability

Risk 55
Severity
8.5
First published (updated )
CVE-2024-37423
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203