Skip to content

Known vulnerabilities in Automattic WordPress

Is your version affected?

CVE Summary Score Published
CVE-2026-66666 Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded… 6.9 Medium Oct 6, 2026
CVE-2026-93485 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic… 7.1 High Sep 18, 2026
CVE-2024-32111 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic WordPress… 5.0 Medium Jun 25, 2024
CVE-2024-31111 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in… 6.5 Medium Jun 25, 2024

Other Automattic products