Known Vulnerabilities for Jetpack Crm by Automattic
Listed below are 4 of the newest known vulnerabilities associated with "Jetpack Crm" by "Automattic".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-32586 json | Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Con... | Not Provided | 2026-03-17 | 2026-04-29 |
| CVE-2026-5191 json | The Tiled Gallery Carousel Without JetPack plugin for WordPress is vulnerable to stored cross-site scripting via the 'data-im... | Not Provided | 2026-06-02 | 2026-06-02 |
| CVE-2023-27429 json | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Automattic - Jetpack CRM team Jetpack CRM plugin <= 5.4.4 ... | 4.8 - MEDIUM | 2023-06-21 | 2023-06-27 |
| CVE-2022-50958 json | WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to... | 4.8 - MEDIUM | 2026-05-10 | 2026-05-24 |
| CVE-2022-4497 json | The Jetpack CRM WordPress plugin before 5.5 does not validate and escape some of its shortcode attributes before outputting t... | 5.4 - MEDIUM | 2023-01-09 | 2023-11-07 |
| CVE-2022-3919 json | The Jetpack CRM WordPress plugin before 5.4.3 does not sanitise and escape its settings, allowing high privilege users such a... | 4.8 - MEDIUM | 2022-12-12 | 2023-11-07 |
| CVE-2022-3342 json | Not Provided | 2023-10-20 | 2026-04-08 |