CVE security advisories and vulnerability history for sensei by Automattic.
6
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
5
Public exploits
PoC or exploit code
5.5
Avg CVSS
2022–2025
Last updated
Overview
Automattic sensei has 6 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 5.5.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Automattic sensei, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of Automattic sensei's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical0
High1
Medium5
Low0
In CISA’s Known Exploited Vulnerabilities catalog
0
None of Automattic sensei's CVEs are currently listed in CISA's KEV catalog.
Public exploits
5
5 of Automattic sensei's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every Automattic sensei version named in a CVE, then pick one to see only the CVEs that affect it.
Specific versions
1.4.06 CVEs
version/1.0.116 CVEs
version/1.0.96 CVEs
version/1.1.06 CVEs
version/1.1.16 CVEs
version/1.1.26 CVEs
version/1.10.06 CVEs
version/1.10.0-beta6 CVEs
version/1.10.0-beta-16 CVEs
version/1.10.0-beta-26 CVEs
version/1.10.16 CVEs
Common weakness types
The CWE weakness categories most often found in Automattic sensei CVEs. Follow any weakness for its full explanation.
Common questions about Automattic sensei vulnerabilities.
How many CVEs does Automattic sensei have?
Automattic sensei has 6 published CVE records since 2022.
How many Automattic sensei CVEs are in CISA KEV?
None of Automattic sensei's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Automattic sensei vulnerabilities?
Yes — 5 of Automattic sensei's CVEs have a known public exploit.
Which versions of Automattic sensei are affected?
195 distinct Automattic sensei versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Automattic sensei CVEs?
Automattic sensei's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of Automattic sensei CVEs?
The average CVSS base score across Automattic sensei's scored CVEs is 5.5.
