Automattic

Security Scorecard

Score

39F

Total CVEs

135

Patch Rate

5%

7 patched

Avg Response

-

days to patch

Critical Gaps

1

exploitable, no detection

Severity Breakdown

Critical1
High10
Medium124
Low0

Patch Status

Patched7 (5%)
Partial/Workaround0 (0%)
Unpatched128 (95%)

CVEs (157)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-13137Woomotiv Plugin VulnerabilityMEDIUM6.18dUnpatched
CVE-2025-13748Fluent Forms VulnerabilityMEDIUM5.38dUnpatched
CVE-2025-12417SurveyFunnel – Survey Plugin VulnerabilityMEDIUM6.49dUnpatched
CVE-2025-12191PDF Catalog for WooCommerce VulnerabilityMEDIUM5.49dUnpatched
CVE-2025-13528Feedback Modal for Website Plugin VulnerabilityMEDIUM5.39dUnpatched
CVE-2025-13620Wp Social Login VulnerabilityMEDIUM5.39dUnpatched
CVE-2025-12128Hide Categories Or Products On Shop Page Plugin VulnerabilityMEDIUM4.39dUnpatched
CVE-2025-13144Cross-Site Request Forgery in ContentStudio PluginMEDIUM4.39dUnpatched
CVE-2025-12782Beaver Builder Authorization BypassMEDIUM4.3-Patched
CVE-2025-13401Autoptimize Plugin VulnerabilityMEDIUM6.411dUnpatched