Feed live

jetpack CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,773

All time

Critical · Active

12,053

CVSS ≥ 9.0

New · 14 days

2,447

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 1–24 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-5191	medium	5.4/10	Tiled Gallery Carousel Without JetPack <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-image-title'	Jun 2, 2026 2mo ago
CVE-2022-50958	medium	5.1/10	WordPress Plugin Jetpack 9.1 Cross Site Scripting via grunion-form-view.php	May 10, 2026 3mo ago
CVE-2026-22356	high	7.5/10	WordPress Jetpack CRM plugin <= 6.7.0 - Local File Inclusion vulnerability	Feb 20, 2026 6mo ago
CVE-2023-54332	medium	5.1/10	Jetpack 11.4 - Cross Site Scripting (XSS)	Jan 13, 2026 7mo ago
CVE-2023-7168	—	—	Better Follow Button for Jetpack <= 8.0 - Admin+ Stored XSS	May 15, 2025 1y ago
CVE-2024-10076	—	—	Jetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS	May 15, 2025 1y ago
CVE-2024-10075	—	—	Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution	May 15, 2025 1y ago
CVE-2024-56006	medium	5.3/10	WordPress Jetpack Debug Tools plugin < 2.0.1 - Broken Access Control vulnerability	May 15, 2025 1y ago
CVE-2025-32494	medium	4.3/10	WordPress reCAPTCHA Jetpack plugin <= 0.2.2 - Cross Site Request Forgery (CSRF) Vulnerability	Apr 9, 2025 1y ago
CVE-2025-32251	medium	5.3/10	WordPress Jetpack Feedback Exporter plugin <= 1.23 - Sensitive Data Exposure Vulnerability	Apr 4, 2025 1y ago
CVE-2024-10858	—	—	Jetpack 13.0-14.0 - Unauthenticated DOM-XSS	Dec 25, 2024 1y ago
CVE-2024-10382	high	7.3/10	Arbitrary Code execution in Car App Android Jetpack Library	Nov 20, 2024 1y ago
CVE-2023-47788	medium	4.3/10	WordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability	Jun 19, 2024 2y ago
CVE-2024-4392	medium	6.4/10	Jetpack – WP Security, Backup, Speed, & Growth <= 13.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpvideo Shortcode	May 14, 2024 2y ago
CVE-2024-3941	—	—	reCAPTCHA Jetpack <= 0.2.2 - Stored XSS via CSRF	May 10, 2024 2y ago
CVE-2024-3940	—	—	reCAPTCHA Jetpack <= 0.2.2 - Settings Update via CSRF	May 10, 2024 2y ago
CVE-2023-47774	medium	5.4/10	WordPress Jetpack plugin < 12.7 - Auth. Iframe Injection vulnerability	Apr 24, 2024 2y ago
CVE-2023-45050	medium	6.5/10	WordPress Jetpack Plugin <= 12.8-a.1 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2022-3342	high	7.5/10	Jetpack CRM <= 5.3.1 - Cross-Site Request Forgery and PHAR Deserialization	Oct 20, 2023 2y ago
CVE-2023-2996	—	—	Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API	Jun 27, 2023 3y ago
CVE-2023-27429	medium	5.9/10	WordPress Jetpack CRM Plugin <= 5.4.4 is vulnerable to Cross Site Scripting (XSS)	Jun 21, 2023 3y ago
CVE-2022-4497	—	—	Jetpack CRM < 5.5 - Contributor+ Stored XSS	Jan 9, 2023 3y ago
CVE-2022-3919	—	—	Jetpack CRM < 5.4.3 - Admin+ Cross-Site Scripting	Dec 12, 2022 3y ago
CVE-2021-24374	—	—	Jetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak	Jun 21, 2021 5y ago