Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-45050 EUVD-2023-49371GHSA-rpf4-363j-82m5

WordPress Jetpack Plugin <= 12.8-a.1 is vulnerable to Cross Site Scripting (XSS)

Published Nov 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Automattic Product: Jetpack – WP Security, Backup, Speed, & Growth

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic Jetpack – WP Security, Backup, Speed, & Growth allows Stored XSS.This issue affects Jetpack – WP Security, Backup, Speed, & Growth: from n/a through 12.8-a.1.

Affected products

VendorProductAffectedFixed
Automattic Jetpack – WP Security, Backup, Speed, & Growth ≤ 12.8-a.1 —

References