Product by Automattic

    Automattic Jetpack

    18 known vulnerabilities in Automattic Jetpack (Automattic), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Automattic Jetpack (Automattic)
    HighCVE-2023-2996

    Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API

    		8.8
    MediumCVE-2021-24374

    Jetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak

    also in 1 other product

    		5.3
    MediumCVE-2024-9926

    Jetpack < 13.9.1 - Subscriber+ Arbitrary Feedback Access

    		4.3
    MediumCVE-2016-10706

    Automattic Jetpack: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2016-10705

    Automattic Jetpack: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9359

    Automattic Jetpack: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2026-106601

    WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability

    		5.4
    Not ratedCVE-2014-0173

    Automattic Jetpack: security vulnerability

    		—
    MediumCVE-2026-106602

    WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability

    		4.8
    MediumCVE-2023-45050

    WordPress Jetpack Plugin <= 12.8-a.1 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		6.5
    Not ratedCVE-2011-4673

    Automattic Jetpack: SQL Injection

    		—
    MediumCVE-2023-54332

    Jetpack 11.4 - Cross Site Scripting (XSS)

    		6.1
    MediumCVE-2024-10858

    Jetpack 13.0-14.0 - Unauthenticated DOM-XSS

    		6.1
    MediumCVE-2024-10075

    Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution

    		5.6
    MediumCVE-2024-4392

    Automattic Jetpack: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-10076

    Jetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS

    		5.9
    HighCVE-2023-47788

    WordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability

    		4.3
    MediumCVE-2023-47774

    Automattic Jetpack: Improper Restriction of Rendered UI Layers or Frames

    		5.4

    All products by Automattic