Automattic vulnerabilities
124 vulnerabilities
Known vulnerabilities in Automattic products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 51 products.
Products
50 of 51- Woocommerce18 vulnerabilities
- Jetpack17 vulnerabilities
- Sensei LMS10 vulnerabilities
- Wp Super Cache6 vulnerabilities
- Activitypub5 vulnerabilities
- Jetpack Crm5 vulnerabilities
- Woopayments5 vulnerabilities
- Crowdsignal Dashboard4 vulnerabilities
- Newspack Blocks4 vulnerabilities
- Woopayments – Fully Integrated Solution Built And Supported By Woo4 vulnerabilities
- Wordpress4 vulnerabilities
- WP Job Manager4 vulnerabilities
- Jetpack – WP Security, Backup, Speed, & Growth3 vulnerabilities
- Mailpoet3 vulnerabilities
- Newspack Newsletters3 vulnerabilities
- Automattic/Mongoose2 vulnerabilities
- Camptix Event Ticketing2 vulnerabilities
- Jetpack Boost2 vulnerabilities
- Mongoose2 vulnerabilities
- Vaultpress2 vulnerabilities
- Woocommerce Blocks2 vulnerabilities
- Woocommerce Bookings2 vulnerabilities
- WP Job Manager Resume Manager2 vulnerabilities
- Akismet1 vulnerabilities
- Canada Post Shipping Method1 vulnerabilities
- Canvas1 vulnerabilities
- Chaostheory1 vulnerabilities
- Crowdsignal Dashboard – Polls, Surveys & More1 vulnerabilities
- Crowdsignal Forms1 vulnerabilities
- Developer1 vulnerabilities
- Genericons1 vulnerabilities
- Ghacitivity1 vulnerabilities
- Ghactivity1 vulnerabilities
- Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation1 vulnerabilities
- Jetpack Debug Tools1 vulnerabilities
- Jetpack Videopress1 vulnerabilities
- Limit Login Attempts1 vulnerabilities
- Newspack1 vulnerabilities
- Newspack Ads1 vulnerabilities
- Newspack Campaigns1 vulnerabilities
- Newspack Content Converter1 vulnerabilities
- Newspack Popups1 vulnerabilities
- Sensei LMS – Online Courses, Quizzes, & Learning1 vulnerabilities
- Sensei Pro (WC Paid Courses)1 vulnerabilities
- W3 Super Cache1 vulnerabilities
- Woocommerce Gocardless1 vulnerabilities
- Woocommerce Payments1 vulnerabilities
- Woocommerce Square1 vulnerabilities
- Woocommerce Stripe1 vulnerabilities
- Woocommerce Subscriptions1 vulnerabilities
CVE-2026-112329automatticsensei lms
EPSS score0.18%
The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the legacy save_new_message handler hooked on the init action, which validates only a generic nonce without verifying course enrollment or restricting post_id to valid post types. Authenticated attackers, including unprivileged Subscribers, can supply an arbitrary post_id for any course, lesson, or quiz to create a private message addressed to that post's author, bypassing the enrollment checks enforced by the newer REST send-message controller.CVE-2026-112328automatticsensei lmsEPSS score0.16%
The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the add_new_module_term AJAX handler that allows authenticated Teacher-role attackers to assign module taxonomy terms to arbitrary courses by supplying a crafted course_id, since the handler validates only a generic nonce and checks manage_options solely for slug prefixing rather than verifying course edit permissions. Attackers can reuse a nonce obtained from their own course metabox to call wp_set_object_terms against courses owned by other teachers or administrators, enabling unauthorized modification of course content they do not own.CVE-2013-2011automatticw3_super_cache+2EPSS score5.13%
WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of an incomplete fix for CVE-2013-2009.CVE-2013-2010automatticwp_super_cache+3EPSS score73.86%
WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution VulnerabilityCVE-2013-2008automatticwp_super_cache+2EPSS score1.52%
WordPress Super Cache Plugin 1.3 has XSS.CVE-2013-2009automatticwp_super_cache+2EPSS score12.98%
WordPress WP Super Cache Plugin 1.2 has Remote PHP Code ExecutionCVE-2021-24323automatticwoocommerce+2EPSS score0.74%
When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashboard, allowing high privilege users such as admin to use XSS payloads even when the unfiltered_html is disabledCVE-2021-24374automatticjetpack+2EPSS score1.49%
The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.CVE-2021-24329automatticwp_super_cache+2EPSS score4.46%
The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wp_cache_location parameter in its settings, which could lead to a Stored Cross-Site Scripting issue.CVE-2021-24312automatticwp_super_cache+1EPSS score1.95%
The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they allow input of '$' and '\n'. This is due to an incomplete fix of CVE-2021-24209.CVE-2021-24209automatticwp_super_cache+2EPSS score27.67%
The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated (admin+) RCE in the settings page due to input validation failure and weak $cache_path check in the WP Super Cache Settings -> Cache Location option. Direct access to the wp-cache-config.php file is not prohibited, so this vulnerability can be exploited for a web shell injection.CVE-2021-32789automatticwoocommerce_blocks+2EPSS score17.23%
woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce Blocks feature plugin between version 2.5.0 and prior to version 2.5.16. Via a carefully crafted URL, an exploit can be executed against the `wc/store/products/collection-data?calculate_attribute_counts[][taxonomy]` endpoint that allows the execution of a read only sql query. There are patches for many versions of this package, starting with version 2.5.16. There are no known workarounds aside from upgrading.CVE-2015-9359automatticjetpack+1EPSS score0.95%
The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg().CVE-2015-9357automatticakismet+1EPSS score0.97%
The akismet plugin before 3.1.5 for WordPress has XSS.CVE-2015-3429automatticgenericons+5EPSS score3.91%
Cross-site scripting (XSS) vulnerability in example.html in Genericons before 3.3.1, as used in WordPress before 4.2.2, allows remote attackers to inject arbitrary web script or HTML via a fragment identifier.CVE-2016-10762automatticcamptix_event_ticketing+1EPSS score1.80%
The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used.CVE-2016-10706automatticjetpack+1EPSS score0.96%
The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link.CVE-2016-10763automatticcamptix_event_ticketing+1EPSS score0.91%
The CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a ticket title or body.CVE-2016-10705automatticjetpack+1EPSS score0.95%
The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module.CVE-2025-26762automatticwoocommerce+1EPSS score0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WooCommerce woocommerce allows Stored XSS.This issue affects WooCommerce: from n/a through <= 9.7.0.