Skip to content

Known vulnerabilities in Automattic Jetpack

Is your version affected?

CVE Summary Score Published
CVE-2026-106601 Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password… 5.4 Medium Oct 9, 2026
CVE-2026-106602 Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password… 4.8 Medium Oct 9, 2026
CVE-2023-54332 Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject… 5.1 Medium Jan 13, 2026
CVE-2024-9926 The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any… 4.3 Medium Nov 7, 2024
CVE-2023-47788 Missing Authorization vulnerability in Automattic Jetpack.This issue affects Jetpack: from n/a before 12.7 4.3 Medium Jun 19, 2024
CVE-2023-47774 Improper Restriction of Rendered UI Layers or Frames vulnerability in Automattic Jetpack allows Clickjacking.This… 5.4 Medium Apr 24, 2024

Other Automattic products