Skip to content
OpenAdvisories

Vendor

Automattic

79 known vulnerabilities.

Products

WooCommerce 17 mongoose 7 Jetpack 5 Newspack Blocks 4 WordPress 4 WP Job Manager 4 Sensei LMS 4 WooPayments – Fully Integrated Solution Built and Supported by Woo 4 Crowdsignal Dashboard – Polls, Surveys & more 3 Newspack Newsletters 3 Jetpack – WP Security, Backup, Speed, & Growth 3 automattic/mongoose 2 WP Job Manager - Resume Manager 2 Jetpack VideoPress 1 Newspack Ads 1 Jetpack CRM 1 GHActivity 1 WP Super Cache 1 Newspack Content Converter 1 Crowdsignal Forms 1 Newspack 1 Newspack Campaigns 1 Crowdsignal Dashboard – Polls, Surveys & more (WordPress plugin) 1 Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation 1 Developer 1 Sensei Pro (WC Paid Courses) 1 ChaosTheory 1 Sensei LMS – Online Courses, Quizzes, & Learning 1 Limit Login Attempts 1 WordPress.com Editing Toolkit 1 Jetpack Debug Tools 1 WooCommerce Blocks 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-125120

    Mongoose: sanitizeFilter not applied on countDocuments

    Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.11, 7.8.12, 8.24.3, and 9.9.2, Mongoose countDocuments() does not apply the configured sanitizeFilter query selector injection defense. An application th…

    Automattic mongoose mongoose npm
  • Critical 9.9
    CVE-2024-37424

    WordPress Newspack Blocks plugin <= 3.0.8 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Automattic Newspack Blocks allows Upload a Web Shell to a Web Server.This issue affects Newspack Blocks: from n/a through 3.0.8.

    Automattic Newspack Blocks
  • Critical 10.0
    CVE-2023-3696

    Prototype Pollution in automattic/mongoose

    Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.4.

    Automattic automattic/mongoose mongoose npm