VENDOR

Automattic vulnerabilities: CVEs, exploitation and patches

Every Automattic CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-93485
WordPress DOM-based cross-site scripting vulnerability Automattic WordPress · Sep 30, 2026
- PoC PUBLIC
- PATCH AVAILABLE
HIGH 7.1