VulnTideExploited vulnerabilities, by vendor. Data as of .
Vendor

Automattic vulnerabilities

In CISA's KEV catalog
0 exploited vulnerabilities
CVE records, last 3 years
73 since
Rank 224 of 467 vendors on this site
Critical or high
24.7% of 73 scored records; 0 not scored

Source: CISA KEV 2026.11.10, as of ; CVE List, as of . About the data.

  • Automattic has 73 CVE records published between 12 Nov 2023 and 12 Nov 2026, ranking #224 of 467 vendors on this site by that count.
  • Of the 73 with a CVSS score, 18 (24.7%) are rated critical or high; 0 (0% of all) have no CVSS score.
  • None of the CVE records attributed to Automattic is listed in CISA's KEV catalog as of 12 Nov 2026.

CVE records per year, by severity

CVE records published per year for Automattic
CVE records published per year for AutomatticStacked bar chart of CVE records attributed to Automattic per publication year, 2017 to 2026, split by severity. 2026 is not finished.0102030402017: 1 high120170201802019020202021: 3 not scored320212022: 1 high2022: 1 medium, low or none220222023: 1 critical2023: 4 high2023: 5 medium, low or none1020232024: 2 critical2024: 4 high2024: 26 medium, low or none3220242025: 12 medium, low or none1220252026: 1 critical2026: 9 high2026: 12 medium, low or none222026*CVE records published per year for AutomatticStacked bar chart of CVE records attributed to Automattic per publication year, 2017 to 2026, split by severity. 2026 is not finished.0102030402017: 1 high1’170’180’190’202021: 3 not scored3’212022: 1 high2022: 1 medium, low or none2’222023: 1 critical2023: 4 high2023: 5 medium, low or none10’232024: 2 critical2024: 4 high2024: 26 medium, low or none32’242025: 12 medium, low or none12’252026: 1 critical2026: 9 high2026: 12 medium, low or none22’26*

* 2026 is counted through .

Show data as a table
Severity by publication year
YearRecordsCriticalHighCritical or highNot scored
2026*221945.5%0%
202512000%0%
2024322418.8%0%
2023101450%0%
202220150%0%
2021300—100%
2020000——
2019000——
2018000——
2017101100%0%

"Critical or high" is the share of scored records; "Not scored" is the share of all records.

Source: CVE List, as of . About the data.

Automattic vulnerabilities reported exploited, not in CISA KEV

Listed in VulnCheck KEV, which cites public reports of exploitation in the wild. CISA has not confirmed these in its own catalog. Most recently listed first.

Source: VulnCheck KEV, as of ; CISA KEV 2026.11.10, as of ; CVE List, as of . About the data.

Highest exploit-prediction scores (EPSS)

EPSS estimates the probability that a vulnerability is exploited in the next 30 days. The highest-scoring Automattic records today, from 1%.

Source: FIRST EPSS, as of ; CVE List, as of ; CISA KEV 2026.11.10, as of . About the data.

All vendors · KEV catalog overview