Vendor
automattic
Public exploit5Avg CVSS6.1
CVEs in the catalog
71
since 2017-11
Months in the top 100
7
months with a stored rank
Best rank
#30
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| woocommerce | 17 | 24% |
| newspack newsletters | 5 | 7% |
| jetpack | 4 | 6% |
| mongoose | 4 | 6% |
| newspack blocks | 4 | 6% |
| woopayments fully integrated solution built and supported by woo | 4 | 6% |
| wp job manager | 4 | 6% |
| crowdsignal dashboard polls surveys more | 3 | 4% |
| jetpack wp security backup speed growth | 3 | 4% |
| sensei lms | 3 | 4% |
| automattic mongoose | 2 | 3% |
| wordpress | 2 | 3% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-79 | 20 | 28% |
| CWE-862 | 14 | 20% |
| CWE-352 | 9 | 13% |
| CWE-200 | 4 | 6% |
| CWE-1321 | 3 | 4% |
| CWE-22 | 3 | 4% |
| CWE-639 | 3 | 4% |
| CWE-89 | 3 | 4% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-48888 | CWE-770 | none yet | 7.5 | 2026-09-08 |
| CVE-2026-57777 | CWE-89 | none yet | 7.6 | 2026-09-04 |
| CVE-2026-73562 | CWE-1321 | none yet | 6.5 | 2026-08-13 |
| CVE-2026-42334 | CWE-74 | none yet | 7.5 | 2026-05-14 |
| CVE-2026-3589 | CWE-352 | none yet | 7.5 | 2026-03-06 |
| CVE-2026-22356 | CWE-98 | 1 | 7.5 | 2026-02-20 |
| CVE-2026-25404 | CWE-862 | none yet | 5.3 | 2026-02-19 |
| CVE-2023-54332 | CWE-79 | none yet | 6.1 | 2026-01-13 |
| CVE-2023-52212 | CWE-352 | none yet | 5.4 | 2026-01-05 |
| CVE-2025-69015 | CWE-862 | 1 | 3.8 | 2025-12-30 |
| CVE-2025-15033 | CWE-200 | none yet | 6.5 | 2025-12-22 |
| CVE-2023-7320 | CWE-200 | none yet | 5.3 | 2025-10-29 |
| CVE-2025-49042 | CWE-79 | none yet | 5.9 | 2025-10-29 |
| CVE-2025-57924 | CWE-352 | none yet | 4.3 | 2025-09-22 |
| CVE-2025-49325 | CWE-601 | none yet | 4.7 | 2025-06-06 |