Skip to content
OpenAdvisories

Vendor

Automattic

78 known vulnerabilities.

Products

WooCommerce 16 mongoose 7 Jetpack 5 Newspack Blocks 4 WordPress 4 WP Job Manager 4 Sensei LMS 4 WooPayments – Fully Integrated Solution Built and Supported by Woo 4 Crowdsignal Dashboard – Polls, Surveys & more 3 Newspack Newsletters 3 Jetpack – WP Security, Backup, Speed, & Growth 3 automattic/mongoose 2 WP Job Manager - Resume Manager 2 Jetpack VideoPress 1 Newspack Ads 1 Jetpack CRM 1 GHActivity 1 WP Super Cache 1 Newspack Content Converter 1 Crowdsignal Forms 1 Newspack 1 Newspack Campaigns 1 Crowdsignal Dashboard – Polls, Surveys & more (WordPress plugin) 1 Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation 1 Developer 1 Sensei Pro (WC Paid Courses) 1 ChaosTheory 1 Sensei LMS – Online Courses, Quizzes, & Learning 1 Limit Login Attempts 1 WordPress.com Editing Toolkit 1 Jetpack Debug Tools 1 WooCommerce Blocks 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-93485 Public exploit Scanner template

    WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WordPress wordpress allows DOM-Based XSS.This issue affects WordPress: from n/a through 7.1.

    Automattic WordPress wordpress wordpress Web / CMS Debian Ubuntu
  • Low 3.8
    CVE-2025-69015 Public exploit

    WordPress Crowdsignal Forms plugin <= 1.7.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Automattic Crowdsignal Forms crowdsignal-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crowdsignal Forms: from n/a through <= 1.7.2.

    Automattic Crowdsignal Forms