Skip to content
OpenAdvisories

Vendor

Automattic

79 known vulnerabilities.

Products

WooCommerce 17 mongoose 7 Jetpack 5 Newspack Blocks 4 WordPress 4 WP Job Manager 4 Sensei LMS 4 WooPayments – Fully Integrated Solution Built and Supported by Woo 4 Crowdsignal Dashboard – Polls, Surveys & more 3 Newspack Newsletters 3 Jetpack – WP Security, Backup, Speed, & Growth 3 automattic/mongoose 2 WP Job Manager - Resume Manager 2 Jetpack VideoPress 1 Newspack Ads 1 Jetpack CRM 1 GHActivity 1 WP Super Cache 1 Newspack Content Converter 1 Crowdsignal Forms 1 Newspack 1 Newspack Campaigns 1 Crowdsignal Dashboard – Polls, Surveys & more (WordPress plugin) 1 Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation 1 Developer 1 Sensei Pro (WC Paid Courses) 1 ChaosTheory 1 Sensei LMS – Online Courses, Quizzes, & Learning 1 Limit Login Attempts 1 WordPress.com Editing Toolkit 1 Jetpack Debug Tools 1 WooCommerce Blocks 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.8
    CVE-2025-69015 Public exploit

    WordPress Crowdsignal Forms plugin <= 1.7.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Automattic Crowdsignal Forms crowdsignal-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crowdsignal Forms: from n/a through <= 1.7.2.

    Automattic Crowdsignal Forms
  • Low 3.5
    CVE-2024-35777

    WordPress WooCommerce plugin <= 8.9.2 - Content Injection vulnerability

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Automattic WooCommerce allows Content Spoofing.This issue affects WooCommerce: from n/a through 8.9.2.

    Automattic WooCommerce Web / CMS