目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

Automattic 厂商漏洞列表 / CVE 中文分析 58

Automattic 厂商相关 58 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Automattic 是 WordPress.com 的运营方及 WordPress 核心贡献者，主要提供博客托管与内容管理解决方案。其生态因广泛使用而成为攻击重灾区，历史漏洞多集中于远程代码执行、跨站脚本及权限绕过。尽管拥有完善的安全团队，但插件兼容性常引发风险。近期值得关注的是其持续强化自动化扫描机制，以应对日益复杂的供应链攻击，确保持续维护平台稳定性。

Top products by Automattic: WooCommerce WP Job Manager Newspack Blocks WooPayments – Fully Integrated Solution Built and Supported by Woo Jetpack Newspack Newsletters Jetpack – WP Security, Backup, Speed, & Growth automattic/mongoose WordPress Sensei LMS WP Job Manager - Resume Manager WP Super Cache Crowdsignal Forms Developer Jetpack Debug Tools Jetpack CRM Crowdsignal Dashboard – Polls, Surveys & more Newspack Content Converter Newspack GHActivity Newspack Ads Newspack Campaigns ChaosTheory Sensei LMS – Online Courses, Quizzes, & Learning WordPress.com Editing Toolkit Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation Limit Login Attempts
CVE ID标题CVSS风险等级Published
CVE-2026-3589 WordPress plugin WooCommerce 安全漏洞 — WooCommerce 8.8 -2026-03-06
CVE-2026-22356 WordPress plugin Jetpack CRM 安全漏洞 — Jetpack CRMCWE-98 7.5 High2026-02-20
CVE-2026-25404 WordPress plugin WP Job Manager 安全漏洞 — WP Job ManagerCWE-862 5.3 Medium2026-02-19
CVE-2023-54332 WordPress plugin Jetpack 跨站脚本漏洞 — JetpackCWE-79 6.1 Medium2026-01-13
CVE-2023-52212 WordPress plugin WP Job Manager 跨站请求伪造漏洞 — WP Job ManagerCWE-352 5.4 Medium2026-01-05
CVE-2025-69015 WordPress plugin Crowdsignal Forms 安全漏洞 — Crowdsignal FormsCWE-862 3.8 Low2025-12-30
CVE-2025-15033 WordPress plugin WooCommerce 安全漏洞 — WooCommerce 4.3AIMediumAI2025-12-22
CVE-2023-7320 WordPress plugin WooCommerce 信息泄露漏洞 — WooCommerceCWE-200 5.3 Medium2025-10-29
CVE-2025-49042 WordPress plugin WooCommerce 跨站脚本漏洞 — WooCommerceCWE-79 5.9 Medium2025-10-29
CVE-2025-57924 WordPress plugin Automattic Developer 跨站请求伪造漏洞 — DeveloperCWE-352 4.3 Medium2025-09-22
CVE-2025-49325 WordPress plugin Newspack Newsletters 输入验证错误漏洞 — Newspack NewslettersCWE-601 4.7 Medium2025-06-06
CVE-2025-5062 WordPress plugin WooCommerce 跨站脚本漏洞 — WooCommerceCWE-79 6.1 Medium2025-05-22
CVE-2024-56006 WordPress plugin Jetpack Debug Tools 安全漏洞 — Jetpack Debug ToolsCWE-862 5.3 Medium2025-05-15
CVE-2025-22740 WordPress plugin Sensei LMS 安全漏洞 — Sensei LMSCWE-862 5.3 Medium2025-03-27
CVE-2025-26762 WordPress plugin WooCommerce 跨站脚本漏洞 — WooCommerceCWE-79 5.9 Medium2025-03-27
CVE-2024-37241 WordPress plugin WP Job Manager - Resume Manager 跨站请求伪造漏洞 — WP Job Manager - Resume ManagerCWE-352 4.3 Medium2025-01-02
CVE-2024-37242 WordPress plugin Newspack Newsletters 跨站请求伪造漏洞 — Newspack NewslettersCWE-352 4.3 Medium2025-01-02
CVE-2024-43338 WordPress plugin Crowdsignal Dashboard – Polls, Surveys & more 跨站请求伪造漏洞 — Crowdsignal Dashboard – Polls, Surveys & moreCWE-352 4.3 Medium2024-11-19
CVE-2024-37423 WordPress plugin Newspack Blocks 路径遍历漏洞 — Newspack BlocksCWE-22 8.5 High2024-11-01
CVE-2024-37425 WordPress plugin Newspack Blocks 安全漏洞 — Newspack BlocksCWE-862 5.4 Medium2024-11-01
CVE-2024-37443 WordPress plugin WP Job Manager - Resume Manager 安全漏洞 — WP Job Manager - Resume ManagerCWE-862 4.3 Medium2024-11-01
CVE-2024-37477 WordPress plugin Newspack Content Converter 安全漏洞 — Newspack Content ConverterCWE-862 6.5 Medium2024-11-01
CVE-2024-37475 WordPress plugin Newspack Newsletters 安全漏洞 — Newspack NewslettersCWE-862 5.3 Medium2024-11-01
CVE-2024-43968 WordPress plugin Newspack 安全漏洞 — NewspackCWE-862 4.3 Medium2024-11-01
CVE-2024-9944 WordPress plugin WooCommerce 安全漏洞 — WooCommerceCWE-79 5.3 Medium2024-10-15
CVE-2024-43949 WordPress plugin GHActivity 跨站脚本漏洞 — GHActivityCWE-79 6.5 Medium2024-08-29
CVE-2024-35686 WordPress plugin Sensei LMS 安全漏洞 — Sensei LMSCWE-862 5.3 Medium2024-08-18
CVE-2024-39666 WordPress plugin WooCommerce 跨站脚本漏洞 — WooCommerceCWE-79 5.9 Medium2024-08-18
CVE-2024-37115 WordPress plugin Newspack Blocks 信息泄露漏洞 — Newspack BlocksCWE-200 7.5 High2024-07-10
CVE-2024-37424 WordPress plugin Newspack Blocks 安全漏洞 — Newspack BlocksCWE-434 9.9 Critical2024-07-09

本页汇总了 Automattic 厂商截至目前公开的全部 58 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。