Automattic 厂商相关 60 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
Automattic 是 WordPress.com 的运营方及 WordPress 核心贡献者，主要提供博客托管与内容管理解决方案。其生态因广泛使用而成为攻击重灾区，历史漏洞多集中于远程代码执行、跨站脚本及权限绕过。尽管拥有完善的安全团队，但插件兼容性常引发风险。近期值得关注的是其持续强化自动化扫描机制，以应对日益复杂的供应链攻击，确保持续维护平台稳定性。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-37115 | WordPress plugin Newspack Blocks 信息泄露漏洞 — Newspack Blocks CWE-200 | 7.5 | High | 2024-07-10 |
| CVE-2024-37424 | WordPress plugin Newspack Blocks 安全漏洞 — Newspack Blocks CWE-434 | 9.9 | Critical | 2024-07-09 |
| CVE-2024-35777 | WordPress plugin WooCommerce 注入漏洞 — WooCommerce CWE-74 | 3.5 | Low | 2024-07-09 |
| CVE-2024-37474 | WordPress plugin Newspack Ads 安全漏洞 — Newspack Ads | 6.5 | Medium | 2024-07-04 |
| CVE-2024-37476 | WordPress plugin Newspack Campaigns 安全漏洞 — Newspack Campaigns | 6.5 | Medium | 2024-07-04 |
| CVE-2024-32111 | WordPress 路径遍历漏洞 — WordPress CWE-22 | 5.0 | Medium | 2024-06-25 |
| CVE-2024-31111 | WordPress 跨站脚本漏洞 — WordPress CWE-79 | 6.5 | Medium | 2024-06-25 |
| CVE-2023-47788 | WordPress plugin Jetpack 安全漏洞 — Jetpack CWE-862 | 4.3 | Medium | 2024-06-19 |
| CVE-2024-34766 | WordPress plugin ChaosTheory 跨站脚本漏洞 — ChaosTheory CWE-79 | 6.5 | Medium | 2024-06-03 |
| CVE-2024-4392 | WordPress plugin Jetpack 安全漏洞 — Jetpack – WP Security, Backup, Speed, & Growth CWE-79 | 6.4 | Medium | 2024-05-14 |
| CVE-2024-34549 | WordPress plugin WP Job Manager 信息泄露漏洞 — WP Job Manager CWE-200 | 5.3 | Medium | 2024-05-09 |
| CVE-2023-47774 | WordPress plugin Jetpack 安全漏洞 — Jetpack CWE-1021 | 5.4 | Medium | 2024-04-24 |
| CVE-2023-52211 | WordPress Plugin WP Job Manager 安全漏洞 — WP Job Manager CWE-862 | 5.3 | Medium | 2024-04-12 |
| CVE-2024-22155 | WordPress Plugin WooCommerce 跨站请求伪造漏洞 — WooCommerce CWE-352 | 4.3 | Medium | 2024-04-07 |
| CVE-2023-50875 | WordPress Plugin Sensei LMS 跨站脚本漏洞 — Sensei LMS – Online Courses, Quizzes, & Learning CWE-79 | 6.5 | Medium | 2024-02-12 |
| CVE-2023-52222 | WordPress Plugin WooCommerce 跨站请求伪造漏洞 — WooCommerce CWE-352 | 4.3 | Medium | 2024-01-08 |
| CVE-2023-51503 | WordPress Plugin WooPayments 安全漏洞 — WooPayments – Fully Integrated Solution Built and Supported by Woo CWE-639 | 5.9 | Medium | 2023-12-31 |
| CVE-2023-50879 | WordPress Plugin WordPress.com Editing Toolkit 跨站脚本漏洞 — WordPress.com Editing Toolkit CWE-79 | 6.5 | Medium | 2023-12-29 |
| CVE-2023-35915 | WordPress Plugin WooPayments SQL注入漏洞 — WooPayments – Fully Integrated Solution Built and Supported by Woo CWE-89 | 7.6 | High | 2023-12-20 |
| CVE-2023-35916 | WordPress Plugin WooPayments 安全漏洞 — WooPayments – Fully Integrated Solution Built and Supported by Woo CWE-639 | 7.5 | High | 2023-12-20 |
| CVE-2023-49828 | WordPress Plugin WooPayments 安全漏洞 — WooPayments – Fully Integrated Solution Built and Supported by Woo CWE-79 | 6.5 | Medium | 2023-12-14 |
| CVE-2023-45050 | WordPress Plugin Jetpack 跨站脚本漏洞 — Jetpack – WP Security, Backup, Speed, & Growth CWE-79 | 6.5 | Medium | 2023-11-30 |
| CVE-2023-47777 | WordPress Plugin WooCommerce 跨站脚本漏洞 — WooCommerce CWE-79 | 6.5 | Medium | 2023-11-30 |
| CVE-2022-3342 | WordPress Plugin Jetpack CRM 代码问题漏洞 — Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation CWE-502 | 7.5 | High | 2023-10-20 |
| CVE-2023-3696 | Automattic Mongoose 安全漏洞 — automattic/mongoose CWE-1321 | 9.8 | - | 2023-07-17 |
| CVE-2023-1912 | WordPress plugin Limit Login Attempts 跨站脚本漏洞 — Limit Login Attempts CWE-79 | 7.2 | High | 2023-04-06 |
| CVE-2022-2564 | Automattic Mongoose 安全漏洞 — automattic/mongoose CWE-1321 | 9.8 | - | 2022-07-28 |
| CVE-2021-24374 | WordPress plugin Jetpack Carousel module of the JetPack 安全漏洞 — Jetpack – WP Security, Backup, Speed, & Growth CWE-639 | 5.3 | - | 2021-06-21 |
| CVE-2021-24312 | WordPress plugin WP Super Cache 操作系统命令注入漏洞 — WP Super Cache CWE-94 | 7.2 | - | 2021-06-01 |
| CVE-2021-24323 | WordPress plugin 跨站脚本漏洞 — WooCommerce CWE-79 | 4.8 | - | 2021-05-17 |
本页汇总了 Automattic 厂商截至目前公开的全部 60 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。