Collapse-O-Matic

Collapse-O-Matic has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (100%).

2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2023.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all Collapse-O-Matic vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-4095

Collapse-O-Matic <= 1.8.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Read the full analysis

Vulnerability Records

4 records


2024-06-14 20:12	Collapse-O-Matic <= 1.8.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Collapse-O-Matic <= 1.8.5.8	`CVE-2024-4095`	6.4 Medium	Jack Taylor	No
2024-04-23 00:00	Collapse-O-Matic <= 1.8.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Collapse-O-Matic <= 1.8.5.5	`CVE-2023-7030`	6.4 Medium	Richard Telleng (stueotue)	Yes
2023-08-22 00:00	Collapse-O-Matic <= 1.8.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Collapse-O-Matic <= 1.8.5.5	`CVE-2023-40669`	6.4 Medium	Rafshanzani Suhada	No
2022-12-28 00:00	Collapse-O-Matic <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Collapse-O-Matic <= 1.8.2	`CVE-2022-4475`	6.4 Medium	István Márton	Yes

Showing 1–4 of 4 reports