Automattic
Security Scorecard
Score
39F
Total CVEs
135
Patch Rate
5%
7 patched
Avg Response
-
days to patch
Critical Gaps
1
exploitable, no detection
Severity Breakdown
Critical1
High10
Medium124
Low0
Patch Status
Patched7 (5%)
Partial/Workaround0 (0%)
Unpatched128 (95%)
CVEs (157)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-11241 | Yoast SEO Premium Vulnerability | MEDIUM | 6.4 | 78d | Unpatched |
| CVE-2025-10053 | TableGen Vulnerability | MEDIUM | 4.4 | 78d | Unpatched |
| CVE-2025-10498 | Ninja Forms Contact Form Builder Vulnerability | MEDIUM | 4.3 | - | Patched |
| CVE-2025-10499 | Ninja Forms Contact Form Builder Vulnerability | MEDIUM | 4.3 | - | Patched |
| CVE-2025-9851 | Appointmind Plugin Vulnerability | MEDIUM | 6.4 | 90d | Unpatched |
| CVE-2025-9565 | Blocksy Companion Plugin Vulnerability | MEDIUM | 6.4 | 90d | Unpatched |
| CVE-2025-9203 | Media Player Addons for Elementor Plugin Vulnerability | MEDIUM | 6.4 | 91d | Unpatched |
| CVE-2025-9018 | Time Tracker Plugin Vulnerability | HIGH | 8.8 | 97d | Unpatched |
| CVE-2025-9442 | StreamWeasels Kick Integration Plugin Vulnerability | MEDIUM | 6.4 | 101d | Unpatched |
| CVE-2025-9057 | Biagiotti Core Plugin Vulnerability | MEDIUM | 6.4 | 103d | Unpatched |