目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Automattic 厂商漏洞列表 / CVE 中文分析 75

Automattic 厂商相关 75 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Automattic 是 WordPress.com 的运营方及 WordPress 核心贡献者，主要提供博客托管与内容管理解决方案。其生态因广泛使用而成为攻击重灾区，历史漏洞多集中于远程代码执行、跨站脚本及权限绕过。尽管拥有完善的安全团队，但插件兼容性常引发风险。近期值得关注的是其持续强化自动化扫描机制，以应对日益复杂的供应链攻击，确保持续维护平台稳定性。

Top products by Automattic: WooCommerce mongoose Jetpack WooPayments – Fully Integrated Solution Built and Supported by Woo WP Job Manager Sensei LMS WordPress Newspack Blocks Jetpack – WP Security, Backup, Speed, & Growth Newspack Newsletters WP Job Manager - Resume Manager automattic/mongoose Developer Newspack Content Converter Crowdsignal Dashboard – Polls, Surveys & more Jetpack Debug Tools Jetpack VideoPress Crowdsignal Forms Jetpack CRM WP Super Cache Newspack GHActivity Newspack Ads Newspack Campaigns ChaosTheory Sensei LMS – Online Courses, Quizzes, & Learning WordPress.com Editing Toolkit Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation Limit Login Attempts
CVE ID 标题 CVSS 风险等级 Published
CVE-2025-22740 WordPress plugin Sensei LMS 安全漏洞 — Sensei LMS CWE-862 5.3 Medium 2025-03-27
CVE-2025-26762 WordPress plugin WooCommerce 跨站脚本漏洞 — WooCommerce CWE-79 5.9 Medium 2025-03-27
CVE-2024-37241 WordPress plugin WP Job Manager - Resume Manager 跨站请求伪造漏洞 — WP Job Manager - Resume Manager CWE-352 4.3 Medium 2025-01-02
CVE-2024-37242 WordPress plugin Newspack Newsletters 跨站请求伪造漏洞 — Newspack Newsletters CWE-352 4.3 Medium 2025-01-02
CVE-2024-43338 WordPress plugin Crowdsignal Dashboard – Polls, Surveys & more 跨站请求伪造漏洞 — Crowdsignal Dashboard – Polls, Surveys & more CWE-352 4.3 Medium 2024-11-19
CVE-2024-37423 WordPress plugin Newspack Blocks 路径遍历漏洞 — Newspack Blocks CWE-22 8.5 High 2024-11-01
CVE-2024-37425 WordPress plugin Newspack Blocks 安全漏洞 — Newspack Blocks CWE-862 5.4 Medium 2024-11-01
CVE-2024-37443 WordPress plugin WP Job Manager - Resume Manager 安全漏洞 — WP Job Manager - Resume Manager CWE-862 4.3 Medium 2024-11-01
CVE-2024-37475 WordPress plugin Newspack Newsletters 安全漏洞 — Newspack Newsletters CWE-862 5.3 Medium 2024-11-01
CVE-2024-37477 WordPress plugin Newspack Content Converter 安全漏洞 — Newspack Content Converter CWE-862 6.5 Medium 2024-11-01
CVE-2024-43968 WordPress plugin Newspack 安全漏洞 — Newspack CWE-862 4.3 Medium 2024-11-01
CVE-2024-9944 WordPress plugin WooCommerce 安全漏洞 — WooCommerce CWE-79 5.3 Medium 2024-10-15
CVE-2024-43949 WordPress plugin GHActivity 跨站脚本漏洞 — GHActivity CWE-79 6.5 Medium 2024-08-29
CVE-2024-35686 WordPress plugin Sensei LMS 安全漏洞 — Sensei LMS CWE-862 5.3 Medium 2024-08-18
CVE-2024-39666 WordPress plugin WooCommerce 跨站脚本漏洞 — WooCommerce CWE-79 5.9 Medium 2024-08-18
CVE-2024-37115 WordPress plugin Newspack Blocks 信息泄露漏洞 — Newspack Blocks CWE-200 7.5 High 2024-07-10
CVE-2024-37424 WordPress plugin Newspack Blocks 安全漏洞 — Newspack Blocks CWE-434 9.9 Critical 2024-07-09
CVE-2024-35777 WordPress plugin WooCommerce 注入漏洞 — WooCommerce CWE-74 3.5 Low 2024-07-09
CVE-2024-37474 WordPress plugin Newspack Ads 安全漏洞 — Newspack Ads 6.5 Medium 2024-07-04
CVE-2024-37476 WordPress plugin Newspack Campaigns 安全漏洞 — Newspack Campaigns 6.5 Medium 2024-07-04
CVE-2024-32111 WordPress 路径遍历漏洞 — WordPress CWE-22 5.0 Medium 2024-06-25
CVE-2024-31111 WordPress 跨站脚本漏洞 — WordPress CWE-79 6.5 Medium 2024-06-25
CVE-2023-47788 WordPress plugin Jetpack 安全漏洞 — Jetpack CWE-862 4.3 Medium 2024-06-19
CVE-2024-34766 WordPress plugin ChaosTheory 跨站脚本漏洞 — ChaosTheory CWE-79 6.5 Medium 2024-06-03
CVE-2024-4392 WordPress plugin Jetpack 安全漏洞 — Jetpack – WP Security, Backup, Speed, & Growth CWE-79 6.4 Medium 2024-05-14
CVE-2024-34549 WordPress plugin WP Job Manager 信息泄露漏洞 — WP Job Manager CWE-200 5.3 Medium 2024-05-09
CVE-2023-47774 WordPress plugin Jetpack 安全漏洞 — Jetpack CWE-1021 5.4 Medium 2024-04-24
CVE-2023-52211 WordPress Plugin WP Job Manager 安全漏洞 — WP Job Manager CWE-862 5.3 Medium 2024-04-12
CVE-2024-22155 WordPress Plugin WooCommerce 跨站请求伪造漏洞 — WooCommerce CWE-352 4.3 Medium 2024-04-07
CVE-2023-50875 WordPress Plugin Sensei LMS 跨站脚本漏洞 — Sensei LMS – Online Courses, Quizzes, & Learning CWE-79 6.5 Medium 2024-02-12

本页汇总了 Automattic 厂商截至目前公开的全部 75 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。