PricingCase studies Login Start trial
Plugin Icon

Jetpack

Automattic

Developer

15.6

Latest version

3,000,000

Installations

No date

Last updated

WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
    VulnerabilitiesSecurity Contributors

Vulnerability history

0 present
20 patched
5 Mitigation rules
  • Contributor+ Stored XSS vulnerability
    < 13.8
    16/05/2025
  • Unauthenticated Arbitrary Block & Shortcode Execution vulnerability
    < 13.8
    16/05/2025
  • Unauthenticated DOM-XSS vulnerability
    13.0-14.0
    25/12/2024
  • Authenticated Arbitrary Feedback Access vulnerability
    < 13.9.1
    14/10/2024
  • Authenticated (Contributor+) Stored Cross-Site Scripting via wpvideo Shortcode vulnerability
    <= 13.3.1
    14/05/2024
  • Contributor+ Broken Access Control vulnerability
    < 12.7
    15/11/2023
  • Contributor+ Iframe Injection vulnerability
    < 12.7
    15/11/2023
  • Cross Site Scripting (XSS) vulnerability
    <= 12.8-a.1
    15/11/2023
  • Arbitrary File Overwrite vulnerability
    <= 12.1
    30/05/2023
  • Attached Image Comment Leak For Non-Published Post And Pages in Carousel Feature
    <= 9.7.1
    01/06/2021
  • Shortcode embedding system vulnerability
    <= 7.9
    21/11/2019
  • Authenticated Stored Cross-Site Scripting (XSS) vulnerability
    <= 6.4.2
    12/12/2018
  • Multiple Vulnerabilities
    <= 4.0.3
    20/06/2016
  • Stored Cross Site Scripting
    <= 4.0.2
    26/05/2016
  • Cross Site Scripting
    <= 3.9.1
    25/02/2016
  • Stored Cross Site Scripting
    <= 3.7.0
    01/10/2015
  • Information Disclosure
    <= 3.7.0
    01/10/2015
  • Cross Site Scripting
    <= 3.5.2
    06/05/2015
  • Cross Site Scripting
    <= 3.4.2
    20/04/2015
  • Security BYPASS
    <= 2.9.2
    03/12/2013

Vulnerability mitigation

  • Pricing
  • Application security (SCA)
  • RapidMitigate New
  • Threat Intelligence (API)
  • VS Monarx
  • VS Imunify360
  • VS Wordfence
  • Documentation
  • Service status
  • Log in

Code security

  • Managed VDP New
  • Active VDP directory 1,169
  • Security auditing
  • Compliance (CRA) New
  • Log in New

Bug bounty

  • Bug bounty
  • Leaderboard
  • Guidelines
  • Learn New
  • Report
  • Discord
  • Log in New

Use cases

  • Web developers
  • Webhosts New
  • Software vendors
  • WordPress
  • WooCommerce

Resources

  • Partners
  • Vulnerability database
  • Whitepaper 2026 New
  • Articles
  • Case studies New
  • Webinars New
  • Vulnerability statistics

Patchstack

  • About
  • Careers
  • Merch store
  • Media kit
  • LinkedIn
  • Facebook
  • X
© 2026 Patchstack
DPA
Privacy Policy
Accessibility
Terms & Conditions