Known Vulnerabilities for Jetpack by Automattic
Listed below are 9 of the newest known vulnerabilities associated with "Jetpack" by "Automattic".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-32586 json | Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Con... | Not Provided | 2026-03-17 | 2026-04-01 |
| CVE-2026-24148 json | NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could c... | Not Provided | 2026-03-31 | 2026-04-02 |
| CVE-2025-32494 json | Cross-Site Request Forgery (CSRF) vulnerability in bozdoz reCAPTCHA Jetpack recaptcha-jetpack allows Cross Site Request Forge... | Not Provided | 2025-04-09 | 2026-04-01 |
| CVE-2025-32251 json | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback E... | Not Provided | 2025-04-04 | 2026-04-01 |
| CVE-2024-4392 json | The Jetpack – WP Security, Backup, Speed, & Growth plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th... | Not Provided | 2024-05-14 | 2026-04-08 |
| CVE-2023-45050 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 5.4 - MEDIUM | 2023-11-30 | 2023-12-06 |
| CVE-2023-2996 json | The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to man... | 8.8 - HIGH | 2023-06-27 | 2023-11-07 |
| CVE-2022-3342 json | The Jetpack CRM plugin for WordPress is vulnerable to PHAR deserialization via the ‘zbscrmcsvimpf’ parameter in the 'zero... | 8.8 - HIGH | 2023-10-20 | 2026-04-08 |
| CVE-2021-24374 json | The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery... | 5.3 - MEDIUM | 2021-06-21 | 2023-02-04 |
| CVE-2016-10706 json | The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link. | 6.1 - MEDIUM | 2018-01-12 | 2018-01-24 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Automattic | Jetpack | 4.0.3 | |||
| Application | Automattic | Jetpack | 4.0.2 | |||
| Application | Automattic | Jetpack | 4.0.1 | |||
| Application | Automattic | Jetpack | 4.0.0 | |||
| Application | Automattic | Jetpack | 3.9.6 | |||
| Application | Automattic | Jetpack | 3.9.5 | |||
| Application | Automattic | Jetpack | 3.9.4 | |||
| Application | Automattic | Jetpack | 3.9.3 | |||
| Application | Automattic | Jetpack | 3.9.2 | |||
| Application | Automattic | Jetpack | 3.9.1 | |||
| Application | Automattic | Jetpack | 3.9.0 | |||
| Application | Automattic | Jetpack | 3.8.2 | |||
| Application | Automattic | Jetpack | 3.8.1 | |||
| Application | Automattic | Jetpack | 3.8.0 | |||
| Application | Automattic | Jetpack | 3.7.2 | |||
| Application | Automattic | Jetpack | 3.7.1 | |||
| Application | Automattic | Jetpack | 3.7 | |||
| Application | Automattic | Jetpack | 3.6.1 | |||
| Application | Automattic | Jetpack | 3.6 | |||
| Application | Automattic | Jetpack | 3.5.3 |