Skip to content
OpenAdvisories

Product · Automattic

Jetpack

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-106602

    WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2.

    Automattic Jetpack
  • Medium 5.4
    CVE-2026-106601

    WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2.

    Automattic Jetpack
  • Medium 6.1
    CVE-2023-54332

    Jetpack 11.4 - Cross Site Scripting (XSS)

    Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts through the post_id parameter. Attackers can craft malicious URLs with script payloads to execute arbitrary JavaScript in v…

    Automattic Jetpack
  • Medium 4.3
    CVE-2023-47788

    WordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability

    Missing Authorization vulnerability in Automattic Jetpack.This issue affects Jetpack: from n/a before 12.7.

    Automattic Jetpack
  • Medium 5.4
    CVE-2023-47774

    WordPress Jetpack plugin < 12.7 - Auth. Iframe Injection vulnerability

    Improper Restriction of Rendered UI Layers or Frames vulnerability in Automattic Jetpack allows Clickjacking.This issue affects Jetpack: from n/a before 12.7.

    Automattic Jetpack