Security Context: the context to find the next vulnerability

Automattic/wp-calypso

trunk@ f627fd1

Fixes4

CVEs0

Peak severityHigh

Commits50,000

Regression coverage0.0%

Highlights

Cross-Site Request Forgery: 2 prior fixes. Scrutinize any change in this area.

client/a8c-for-agencies/sections/auth: most-fixed (1 issue). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Cross-Site Request Forgery: 1 historical fix(es) link client/auth, client/boot/common.js, client/jetpack-cloud/sections/auth, client/a8c-for-agencies/sections/auth to Cross-Site Request Forgery.

Cross-Site Request Forgery: 1 historical fix(es) link client/dashboard/app/auth to Cross-Site Request Forgery.

Cross-Site Scripting: 1 historical fix(es) link client/my-sites/comments/comment/comment-content.jsx to Cross-Site Scripting.

Last analyzed 30 Sep 2026, 02:50 UTC