Jetpack
Vendor:
First CVE: Dec 2, 2011 · Active for 14 years
16
Total CVEs
More Total CVEs than 93% of tracked products
1.8
Avg CVEs / Year
Higher CVE frequency than 63% of tracked products
6.2
Avg CVSS
Higher Avg CVSS than 28% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Jetpack over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 2, 2011
14 years ago
Most Recent CVE
Jan 13, 2026
196 days ago
CVE Severity & Scoring
Jetpack16 CVEs
81%
19%
All CVEs353,173 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network14 (87.5%)
Unknown2 (12.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (81.3%)
High1 (6.3%)
Unknown2 (12.5%)
User Interaction
None5 (31.3%)
Unknown2 (12.5%)
Required9 (56.3%)
Privileges Required
Low6 (37.5%)
High1 (6.3%)
None7 (43.8%)
Unknown2 (12.5%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-4673HIGH SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. | Dec 2, 2011 | 7.5 | 33 | NO | YES |
CVE-2023-2996HIGH The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary | Jun 27, 2023 | 8.8 | 28 | NO | NO |
CVE-2023-47788HIGH Missing Authorization vulnerability in Automattic Jetpack.This issue affects Jetpack: from n/a before 12.7. | Jun 19, 2024 | 8.8 | 27 | NO | NO |
CVE-2023-54332MEDIUM Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts through the post_id parameter. Attackers can | Jan 13, 2026 | 6.1 | 22 | NO | NO |
CVE-2014-0173MEDIUM The Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before 2.2.7, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.2, 2.6.x before 2.6 | Apr 22, 2014 | 5.8 | 21 | NO | NO |
CVE-2021-24374MEDIUM The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security | Jun 21, 2021 | 5.3 | 19 | NO | NO |
CVE-2016-10706MEDIUM The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link. | Jan 12, 2018 | 6.1 | 19 | NO | NO |
CVE-2016-10705MEDIUM The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module. | Jan 12, 2018 | 6.1 | 19 | NO | NO |
CVE-2024-10858MEDIUM The Jetpack WordPress plugin before 14.1 does not properly checks the postmessage origin in its 13.x versions, allowing it to be bypassed and leading to DOM-XSS. The issue only af | Dec 25, 2024 | 6.1 | 18 | NO | NO |
CVE-2023-47774MEDIUM Improper Restriction of Rendered UI Layers or Frames vulnerability in Automattic Jetpack allows Clickjacking.This issue affects Jetpack: from n/a before 12.7. | Apr 24, 2024 | 5.4 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
6.2% of CVEs· 86th percentile
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Jetpack
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.9.3 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.9.2 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.9.1 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.9 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.8 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.7 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.6.1 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.6 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.5 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.4.2 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.4.1 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.4 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.3.5 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.3.4 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.3.3 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.3.2 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.3.1 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.3 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.2.5 | 1 | 5.8 | 2.3% | 0 | 0 |
| 2.2.4 | 1 | 5.8 | 2.3% | 0 | 0 |