Automattic Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

WooCommerce15 vulnerabilities
Jetpack4 vulnerabilities
Newspack Blocks4 vulnerabilities
WooPayments – Fully Integrated Solution Built and Supported by Woo4 vulnerabilities
WP Job Manager4 vulnerabilities
Jetpack – WP Security, Backup, Speed, & Growth3 vulnerabilities
mongoose3 vulnerabilities
Newspack Newsletters3 vulnerabilities
newspack_newsletters3 vulnerabilities
automattic/mongoose2 vulnerabilities
Sensei LMS2 vulnerabilities
sensei_lms2 vulnerabilities
WordPress2 vulnerabilities
WP Job Manager - Resume Manager2 vulnerabilities
wp_job_manager2 vulnerabilities
activitypub1 vulnerability
ChaosTheory1 vulnerability
Crowdsignal Dashboard – Polls, Surveys & more1 vulnerability
Crowdsignal Forms1 vulnerability
Developer1 vulnerability
GHActivity1 vulnerability
Jetpack CRM1 vulnerability
Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation1 vulnerability
Jetpack Debug Tools1 vulnerability
Limit Login Attempts1 vulnerability

Automattic vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2024-43338MEDIUM	WordPress Crowdsignal Polls & Ratings plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerability Cross-Site Request Forgery (CSRF) vulnerability in Automattic Crowdsignal Dashboard – Polls, Surveys & more polldaddy allows Cross Site Request Forgery.This issue affects Crowdsignal Dashboard – Polls, Surveys & more: from n/a through <= 3.1.3. CWE-352Nov 19, 2024	CVSS4.3v3.1	EPSS0.214%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX