Jetpack vulnerabilities

Products

• Jetpack 11

Newest

• automattic jetpack WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability CVE-2026-106602 4.8 MediumOctober 9, 2026
• automattic jetpack WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability CVE-2026-106601 5.4 MediumOctober 9, 2026
• jetpack WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php CVE-2022-50958 5.1 MediumMay 10, 2026
• automattic jetpack Jetpack 11.4 - Cross Site Scripting (XSS) CVE-2023-54332 5.1 MediumJanuary 13, 2026
• automattic jetpack, jetpack boost +1 more Jetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS CVE-2024-10076 5.9 MediumMay 15, 2025
• automattic jetpack Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution CVE-2024-10075 5.6 MediumMay 15, 2025
• automattic jetpack Jetpack 13.0-14.0 - Unauthenticated DOM-XSS CVE-2024-10858 Public exploit 6.1 MediumDecember 25, 2024
• automattic jetpack Jetpack < 13.9.1 - Subscriber+ Arbitrary Feedback Access CVE-2024-9926 Public exploit 4.3 MediumNovember 7, 2024
• automattic jetpack WordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability CVE-2023-47788 4.3 MediumJune 19, 2024
• automattic jetpack WordPress Jetpack plugin < 12.7 - Auth. Iframe Injection vulnerability CVE-2023-47774 5.4 MediumApril 24, 2024
• automattic jetpack Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API CVE-2023-2996 8.8 HighJune 27, 2023