Vulnerabilities in automattic
76 resultsCVE-2024-43949MEDIUMWordPress GHActivity plugin <= 2.0.0-alpha - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-34766MEDIUMWordPress ChaosTheory theme <= 1.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-43338MEDIUMWordPress Crowdsignal Polls & Ratings plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-22155MEDIUMWordPress WooCommerce plugin <= 8.5.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-26762MEDIUMWordPress WooCommerce plugin <= 9.7.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-37241MEDIUMWordPress WP Job Manager Resume Manager plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-37242MEDIUMWordPress Newspack Newsletters plugin <= 2.13.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-112329MEDIUMSensei LMS 4.26.4 Broken Access Control via save_new_messageEPSS 0.2%CVE-2026-106602MEDIUMWordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerabilityEPSS 0.2%CVE-2026-106601MEDIUMWordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerabilityEPSS 0.2%CVE-2025-49042MEDIUMWordPress WooCommerce plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-112328MEDIUMSensei LMS 4.26.4 Broken Access Control via add_new_module_term AJAXEPSS 0.2%CVE-2025-57924MEDIUMWordPress Developer Plugin <= 1.2.6 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2026-3589HIGHWooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRFEPSS 0.1%CVE-2023-52212MEDIUMWordPress WP Job Manager plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-125801MEDIUMWordPress WooCommerce plugin 11.0.0-11.2.2 - Race Condition vulnerabilityEPSS —