Automattic WordPress Vulnerabilities
CVE security advisories and vulnerability history for WordPress by Automattic.
CVE security advisories and vulnerability history for WordPress by Automattic.
Last updated
Automattic WordPress has 6 published CVE records since 2024, of which none are in CISA's KEV catalog and none have a known public exploit. The average CVSS base score across scored CVEs is 6.0.
How the CVSS severity of Automattic WordPress's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of Automattic WordPress's CVEs are currently listed in CISA's KEV catalog.
Public exploits
0
No Automattic WordPress CVEs currently have a tracked public exploit.
The CWE weakness categories most often found in Automattic WordPress CVEs. Follow any weakness for its full explanation.
How many Automattic WordPress CVEs were published each year.
Browse vulnerabilities for other products by Automattic.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new Automattic WordPress CVE, with AI-written analysis and remediation steps.
Common questions about Automattic WordPress vulnerabilities.
Browse every Automattic WordPress version named in a CVE, then pick one to see only the CVEs that affect it.
Showing the 40 most-used of 166 versions. Search to find any version.
6 CVEs