Pricing
Case studies
Login
Start trial
Jetpack
Automattic
Developer
15.6
Latest version
3,000,000
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
20 patched
5 Mitigation rules
Contributor+ Stored XSS vulnerability
< 13.8
16/05/2025
Unauthenticated Arbitrary Block & Shortcode Execution vulnerability
< 13.8
16/05/2025
Unauthenticated DOM-XSS vulnerability
13.0-14.0
25/12/2024
Authenticated Arbitrary Feedback Access vulnerability
< 13.9.1
14/10/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via wpvideo Shortcode vulnerability
<= 13.3.1
14/05/2024
Contributor+ Broken Access Control vulnerability
< 12.7
15/11/2023
Contributor+ Iframe Injection vulnerability
< 12.7
15/11/2023
Cross Site Scripting (XSS) vulnerability
<= 12.8-a.1
15/11/2023
Arbitrary File Overwrite vulnerability
<= 12.1
30/05/2023
Attached Image Comment Leak For Non-Published Post And Pages in Carousel Feature
<= 9.7.1
01/06/2021
Shortcode embedding system vulnerability
<= 7.9
21/11/2019
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 6.4.2
12/12/2018
Multiple Vulnerabilities
<= 4.0.3
20/06/2016
Stored Cross Site Scripting
<= 4.0.2
26/05/2016
Cross Site Scripting
<= 3.9.1
25/02/2016
Stored Cross Site Scripting
<= 3.7.0
01/10/2015
Information Disclosure
<= 3.7.0
01/10/2015
Cross Site Scripting
<= 3.5.2
06/05/2015
Cross Site Scripting
<= 3.4.2
20/04/2015
Security BYPASS
<= 2.9.2
03/12/2013