Product by Automattic

    Jetpack CRM

    5 known vulnerabilities in Jetpack CRM (Automattic), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Jetpack CRM (Automattic)
    HighCVE-2022-3342

    Jetpack CRM <= 5.3.1 - Cross-Site Request Forgery and PHAR Deserialization

    		7.5
    HighCVE-2026-22356

    WordPress Jetpack CRM plugin <= 6.7.0 - Local File Inclusion vulnerability

    		7.5
    MediumCVE-2022-4497

    Jetpack CRM < 5.5 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2023-27429

    WordPress Jetpack CRM Plugin <= 5.4.4 is vulnerable to Cross Site Scripting (XSS)

    		5.9
    MediumCVE-2022-3919

    Jetpack CRM < 5.4.3 - Admin+ Cross-Site Scripting

    		4.8

    All products by Automattic