Filter
Software
automattic jetpack
8
automattic wp super cache
6
automattic woopayments
5
automattic activitypub
4
automattic sensei lms
4
automattic crowdsignal dashboard
3
automattic woocommerce
3
automattic camptix event ticketing
2
automattic jetpack crm
2
automattic vaultpress
2
automattic woocommerce blocks
2
automattic woocommerce bookings
2
automattic akismet
1
automattic canada post shipping method
1
automattic canvas
1
automattic genericons
1
automattic ghacitivity wordpress
1
automattic ghactivity wordpress
1
automattic newspack ads wordpress
1
automattic newspack popups wordpress
1
automattic w3 super cache
1
automattic woocommerce gocardless
1
automattic woocommerce payments
1
automattic woocommerce square
1
automattic woocommerce stripe
1
automattic woocommerce subscriptions
1
automattic wordpress.com editing toolkit
1
Automattic Newspack Popups WordpressWordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerability
6.5
First published (updated )
Automattic JetpackJetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API
8.8
First published (updated )
Automattic ActivitypubActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS
5.4
First published (updated )
Automattic Jetpack CrmJetpack CRM < 5.5 - Contributor+ Stored XSS
5.4
First published (updated )
Automattic Crowdsignal DashboardWordPress Crowdsignal Dashboard plugin <= 3.0.9 - Privilege Escalation vulnerability
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-27429WordPress Jetpack CRM Plugin <= 5.4.4 is vulnerable to Cross Site Scripting (XSS)
5.9
First published (updated )
Automattic Sensei LmsSensei LMS < 4.24.2 - Unauthenticated Email Template Leak
7.5
EPSS
0.22%
First published (updated )
Automattic Woocommerce BookingsWordPress WooCommerce Bookings Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Automattic Ghacitivity WordpressWordPress GHActivity plugin <= 2.0.0-alpha - Cross Site Scripting (XSS) vulnerability
6.5
First published (updated )
Automattic WoopaymentsWordPress WooCommerce Payments Plugin <= 6.6.2 is vulnerable to Insecure Direct Object References (IDOR)
7.5
First published (updated )
Automattic Woocommerce StripeWordPress WooCommerce Stripe Payment Gateway Plugin <= 7.6.1 is vulnerable to Insecure Direct Object References (IDOR)
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Automattic W3 Super CacheWordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could…
8.8
First published (updated )
Automattic Wp Super CacheWordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
9.8
First published (updated )
Automattic Wp Super CacheWordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution
8.8
First published (updated )
Automattic VaultpressVaultPress Plugin MailPoet Plugin class.vaultpress-hotfixes.php protect_aioseo_ajax unrestricted upload
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Automattic JetpackThe Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before 2.2…
5.8
First published (updated )
Automattic VaultpressVaultPress Plugin code injection
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Automattic Woocommerce BlocksArbitrary SQL (SQL injection) possible via the Store API component.
7.5
First published (updated )
Automattic JetpackJetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak
5.3
First published (updated )
Automattic Wp Super CacheWP Super Cache < 1.7.3 - Authenticated Remote Code Execution
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.