Jetpack
Automattic
Developer
16.2
Latest version
3,000,000
Installations
No date
Last updated
Vulnerability history
0 present
23 patched
5 Mitigation rules
- Reflected to Stored Cross-Site Scripting via Reader Repost Parameters16.1-16.1.208/09/2026
- WordPress Jetpack plugin 3.2 - 16.1.2 - Missing Authorization on WPCOM Media API Attachment Parent vulnerability16.1-16.1.205/09/2026
- Authenticated (Administrator+) PHP Object Injection vulnerability16.1-16.1.205/09/2026
- Contributor+ Stored XSS vulnerability< 13.816/05/2025
- Unauthenticated Arbitrary Block & Shortcode Execution vulnerability< 13.816/05/2025
- Unauthenticated DOM-XSS vulnerability13.0-14.025/12/2024
- Authenticated Arbitrary Feedback Access vulnerability< 13.9.114/10/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via wpvideo Shortcode vulnerability<= 13.3.114/05/2024
- Contributor+ Broken Access Control vulnerability< 12.715/11/2023
- Contributor+ Iframe Injection vulnerability< 12.715/11/2023
- Cross Site Scripting (XSS) vulnerability<= 12.8-a.115/11/2023
- Arbitrary File Overwrite vulnerability<= 12.130/05/2023
- Attached Image Comment Leak For Non-Published Post And Pages in Carousel Feature<= 9.7.101/06/2021
- Shortcode embedding system vulnerability<= 7.921/11/2019
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 6.4.212/12/2018
- Multiple Vulnerabilities<= 4.0.320/06/2016
- Stored Cross Site Scripting<= 4.0.226/05/2016
- Cross Site Scripting<= 3.9.125/02/2016
- Stored Cross Site Scripting<= 3.7.001/10/2015
- Information Disclosure<= 3.7.001/10/2015
- Cross Site Scripting<= 3.5.206/05/2015
- Cross Site Scripting<= 3.4.220/04/2015
- Security BYPASS<= 2.9.203/12/2013