Automattic vulnerabilities
78 CVEs and advisories name Automattic as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-50875WordPress Sensei LMS Plugin <= 4.17.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-51488WordPress Crowdsignal Dashboard – Polls, Surveys & more Plugin <= 3.0.11 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52222WordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-51503WordPress WooCommerce Payments Plugin <= 6.6.2 is vulnerable to Insecure Direct Object References (IDOR)
- CVE-2023-50879WordPress WordPress.com Editing Toolkit Plugin <= 3.78784 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-35915WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection
- CVE-2023-35916WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to Insecure Direct Object References (IDOR)
- CVE-2023-49828WordPress WooCommerce Payments Plugin <= 6.4.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45050WordPress Jetpack Plugin <= 12.8-a.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47777WordPress WooCommerce and WooCommerce Blocks plugins - Auth. Cross-Site Scripting (XSS) vulnerability
- CVE-2022-3342Jetpack CRM <= 5.3.1 - Cross-Site Request Forgery and PHAR Deserialization
- CVE-2023-3696Prototype Pollution in automattic/mongoose
- CVE-2023-1912Limit Login Attempts <= 1.7.1 - Unauthenticated Stored Cross-Site Scripting
- CVE-2022-45069WordPress Crowdsignal Dashboard plugin <= 3.0.9 - Privilege Escalation vulnerability
- CVE-2022-2564Prototype Pollution in automattic/mongoose
- CVE-2021-24374Jetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak
- CVE-2021-24312WP Super Cache < 1.7.3 - Authenticated Remote Code Execution
- CVE-2021-24323Woocommerce < 5.2.0 - Authenticated Stored Cross-Site Scripting (XSS)