Automattic WordPress
3 CVEs affecting Automattic WordPress. Latest disclosed: 2026-09-18. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-93485 | High | 7.1 | 2026-09-18 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Automattic WordPress core allows DOM-Based XSS. This is… |
CVE-2024-31111 | Medium | 6.5 | 2024-06-25 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic WordPress allows Stored XSS.This issue… |
CVE-2024-32111 | Medium | 5.0 | 2024-06-25 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic WordPress allows Relative Path Traversal.This issue… |