Skip to contentAutomattic vulnerabilities
Newest
- boldgrid w3 total cache, w3 total cache plugin authors total cache plugin, automattic wp super cache +2 moreWordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution VulnerabilityCVE-2013-2010Public exploitEPSS 73.9%9.8 Critical
- automattic wp super cache, wp super cache plugin authors super cache plugin +1 moreWordPress WP Super Cache Plugin 1.2 has Remote PHP Code ExecutionCVE-2013-2009Public exploitEPSS 16.4%8.8 High
- super cache plugin cache plugin, automattic wp super cache +1 moreWordPress Super Cache Plugin 1.3 has XSS.CVE-2013-20086.1 Medium
- automattic w3 super cache, super cache plugin cache plugin +1 moreWordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which...CVE-2013-20118.8 High
- automattic jetpackThe Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg().CVE-2015-93596.1 Medium
- automattic akismetThe akismet plugin before 3.1.5 for WordPress has XSS.CVE-2015-9357Public exploit6.1 Medium
- automattic camptix event ticketingThe CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export...CVE-2016-107627.5 High
- automattic camptix event ticketingThe CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a...CVE-2016-107634.8 Medium
- automattic jetpackThe Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link.CVE-2016-107066.1 Medium
- automattic jetpackThe Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module.CVE-2016-107056.1 Medium
- automattic woocommerce** DISPUTED ** The WooCommerce plugin through 3.x for WordPress has a Directory Traversal...CVE-2017-17058Public exploitDisputedEPSS 23.7%7.5 High
- automattic mongooseAn exploitable memory corruption vulnerability exists in the Websocket protocol implementation of...CVE-2017-2922Fix available9.8 Critical
- automattic mongooseAn exploitable memory corruption vulnerability exists in the Websocket protocol implementation of...CVE-2017-2921Fix available8.1 High
- automattic mongooseAn infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8...CVE-2017-2909Fix available7.5 High
- automattic mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing...CVE-2017-2895Fix available8.2 High
- automattic mongooseAn exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing...CVE-2017-2894Fix availableEPSS 31.0%9.8 Critical
- automattic mongooseAn exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing...CVE-2017-2893Fix availableEPSS 24.9%7.5 High
- automattic mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing...CVE-2017-2892Fix available9.8 Critical
- automattic mongooseAn exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta...CVE-2017-2891Fix available9.8 Critical
- automattic genericons, debian linux +1 moreCross-site scripting (XSS) vulnerability in example.html in Genericons before 3.3.1, as used in...CVE-2015-3429Fix available4.3 Medium
- automattic jetpackThe Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before...CVE-2014-01735.8 Medium
- automattic jetpackSQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows...CVE-2011-4673Public exploit7.5 High