What’s Vulnerable › Products

Jetpack vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Jetpack version is affected

Latest Jetpack vulnerabilities

• CVE-2026-106602 — WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability (CVSS 4.8)
• CVE-2026-106601 — WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability (CVSS 5.4)
• CVE-2023-54332 — Jetpack 11.4 - Cross Site Scripting (XSS) (CVSS 6.1)
• CVE-2024-10076 — Jetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS (CVSS 5.9)
• CVE-2024-10075 — Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution (CVSS 5.6)
• CVE-2024-10858 — Jetpack 13.0-14.0 - Unauthenticated DOM-XSS (CVSS 6.1)
• CVE-2024-9926 — Jetpack < 13.9.1 - Subscriber+ Arbitrary Feedback Access (CVSS 4.3)
• CVE-2023-47788 — WordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability (CVSS 8.8)
• CVE-2024-4392 — Jetpack – WP Security, Backup, Speed, & Growth <= 13.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpvideo Shortcode (CVSS 5.4)
• CVE-2023-47774 — WordPress Jetpack plugin < 12.7 - Auth. Iframe Injection vulnerability (CVSS 5.4)
• CVE-2023-45050 — WordPress Jetpack Plugin <= 12.8-a.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2023-2996 — Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API (CVSS 8.8)
• CVE-2021-24374 — Jetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak (CVSS 5.3)
• CVE-2015-9359 — (CVSS 6.1)
• CVE-2016-10706 — (CVSS 6.1)
• CVE-2016-10705 — (CVSS 6.1)
• CVE-2014-0173 — (CVSS 5.8)
• CVE-2011-4673 — (CVSS 7.5)