JE
Product
Jetpack
18
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 2Medium 14Low 0
Watch
Add Jetpack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-54332 | 6.1 | Jan 13 | Jetpack 11.4 - Cross Site Scripting (XSS) Affected: 11.4 |
| CVE-2024-10858 | 6.1 | Dec 25 | Jetpack 13.0-14.0 - Unauthenticated DOM-XSS Affected: before 14.1 |
| CVE-2015-9359 | 6.1 | Aug 28 | The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg() Affected: before 3.4.3 |
| CVE-2016-10706 | 6.1 | Jan 12 | The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link Affected: before 4.0.3 |
| CVE-2016-10705 | 6.1 | Jan 12 | The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module Affected: through 4.0.3 |
| CVE-2024-10076 | 5.9 | May 15 | Jetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS Affected: before 13.8 |
| CVE-2024-10075 | 5.6 | May 15 | Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution Affected: before 13.8 |
| CVE-2026-106601 | 5.4 | Oct 9 | WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability Affected: through 16.2 |
| CVE-2024-4392 | 5.4 | May 14 | The Jetpack – WP Security, Backup, Speed, & Growth plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpvideo shortcode in all versions up to, and… Affected: before 13.4 |
| CVE-2023-47774 | 5.4 | Apr 24 | Improper Restriction of Rendered UI Layers or Frames vulnerability in Automattic Jetpack allows Clickjacking.This issue affects Jetpack: from n/a before 12.7 Affected: before 12.7 |
| CVE-2023-45050 | 5.4 | Nov 30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic Jetpack – WP Security, Backup, Speed, & Growth allows Stored… Affected: through 12.8-a.1 |
| CVE-2021-24374 | 5.3 | Jun 21 | The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images Affected: before 9.8 |
| CVE-2026-106602 | 4.8 | Oct 9 | WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability Affected: through 16.2 |
| CVE-2024-9926 | 4.3 | Nov 7 | Jetpack < 13.9.1 - Subscriber+ Arbitrary Feedback Access Affected: 13.1 before 13.1.4; 13.2 before 13.2.3; 13.3 before 13.3.2; 13.4 before 13.4.4; 13.8 before 13.8.2; 13.0; +4 more |
Showing 14