Login Request a demo
JC
Product
Jetpack CRM
by Automattic · last CVE Feb 20, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jetpack CRM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-3342
8.8
1%
Oct 20
The Jetpack CRM plugin for WordPress is vulnerable to PHAR deserialization via the ‘zbscrmcsvimpf’ parameter in the 'zeroBSCRM_CSVImporterLitehtml_app' function in versions up to,…
Affected: through 5.3.1
CVE-2026-22356
7.5
1%
Feb 20
WordPress Jetpack CRM plugin <= 6.7.0 - Local File Inclusion vulnerability
Affected: through 6.7.0
CVE-2022-4497
5.4
1%
Jan 9
The Jetpack CRM WordPress plugin before 5.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a…
Affected: before 5.5.0
CVE-2023-27429
4.8
0%
Jun 21
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Automattic - Jetpack CRM team Jetpack CRM plugin <= 5.4.4 versions
Affected: before 5.5.0
CVE-2022-3919
4.8
0%
Dec 12
The Jetpack CRM WordPress plugin before 5.4.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even…
Affected: before 5.4.3
Showing 5