Automattic Jetpack vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Automattic Jetpack: 3 record(s), with affected versions and fixes.
CVE-2026-106601
Medium · 5.4
CWE-288 Oct 9, 2026
WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2.
CVE-2026-106602
Medium · 4.8
CWE-288 Oct 9, 2026
WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a through 16.2.
CVE-2023-54332
Medium · 6.1
CWE-79 Jan 13, 2026
Jetpack 11.4 - Cross Site Scripting (XSS)
Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts through the post_id parameter. Attackers can craft malicious URLs with script payloads to execute arbitrary JavaScript in victims' browsers when they interact with the contact form page.