automattic Latest Vulnerabilities

Latest vulnerabilities published by automattic

JSON RSS CSV 🔔 Create Alert Trigger

13 January 2026

Cross-Site Scripting Vulnerability in Jetpack Plugin by WordPress
CVE-2023-54332
AutomatticJetpack👾🟡5.1MEDIUM

22 December 2025

Data Exposure Vulnerability in WooCommerce by Automattic
CVE-2025-15033
AutomatticWooocommerce👾🟡

27 March 2025

Missing Authorization in Automattic Sensei LMS Plugin
CVE-2025-22740
AutomatticSensei Lms5.3MEDIUM
Stored Cross-site Scripting Vulnerability in WooCommerce by Automattic
CVE-2025-26762
AutomatticWooCommerce5.9MEDIUM

2 December 2024

Search Injection Vulnerability in Mongoose by Automattic
CVE-2024-53900
AutomatticMongoose👾🟡EPSS 45%

9 July 2024

Content Spoofing Vulnerability Affects WooCommerce Versions
CVE-2024-35777
Automattic

4 July 2024

Stored XSS Vulnerability in Newspack Ads
CVE-2024-37474
AutomatticNewspack Ads5.4MEDIUM

16 March 2024

Cross-Site Request Forgery (CSRF) Vulnerability in Crowdsignal Dashboard
CVE-2023-51489
Automattic, Inc.Crowdsignal Dashboard8.8HIGH

8 January 2024

Cross-Site Request Forgery Vulnerability in Automattic WooCommerce Plugin
CVE-2023-52222
AutomatticWooCommerce4.3MEDIUM

17 July 2023

Prototype Pollution in automattic/mongoose
CVE-2023-3696
AutomatticAutomattic/mongoose10CRITICAL

28 July 2022

Prototype Pollution in automattic/mongoose
CVE-2022-2564
AutomatticAutomattic/mongoose7HIGH

17 May 2021

Woocommerce < 5.2.0 - Authenticated Stored Cross-Site Scripting (XSS)
CVE-2021-24323
AutomatticWooCommerce4.8MEDIUM