Advisories · Technology

Automattic Jetpack.

Every CVE that names Automattic Jetpack among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-106601 CVE record

CVSS 5.4 Medium

WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability
- Automattic Jetpack
- Authentication bypass
Not analysed yet 9 Oct 2026
CVE-2026-106602 CVE record

CVSS 4.8 Medium

WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability
- Automattic Jetpack
- Authentication bypass
Not analysed yet 9 Oct 2026
CVE-2023-54332 CVE record

CVSS 5.1 Medium

Jetpack 11.4 - Cross Site Scripting (XSS)
- Automattic Jetpack
- Cross-site scripting (XSS)
Not analysed yet 13 Jan 2026
CVE-2023-47788 CVE record

CVSS 4.3 Medium

WordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability
- Automattic Jetpack
- Broken access control
Not analysed yet 19 Jun 2024
CVE-2023-47774 CVE record

CVSS 5.4 Medium

WordPress Jetpack plugin < 12.7 - Auth. Iframe Injection vulnerability
- Automattic Jetpack
- CWE-1021
Not analysed yet 24 Apr 2024